Guest

Preview Tool

Cisco Bug: CSCuj75131 - WebVPN configs not synced with standby - ASDM symptom

Last Modified

Nov 10, 2016

Products (1)

  • Cisco Adaptive Security Device Manager

Known Affected Releases

7.1(3) 7.1(4)

Description (partial)

Symptom:
##### Symptom 2: #####

On ASDM, 

  - active ASA

Step1: go to "Configuration > Remote Access VPN > Clientless SSL VPN Access > Dynamic Access Policies", configure something such as:
      dynamic-access-policy-record DfltAccessPolicy
      action continue

Step2: go to "Configuration > Remote Access VPN > Host Scan Image", configure below:
      webvpn
      csd enable
  
  - standby ASA

    a5525a/sec/stby# fover_parse: parse_thread_helper: Cmd: dynamic-access-policy-record DfltAccessPolicy
    fover_parse: parse_thread_helper: Cmd: action continue
    fover_parse: parse_thread_helper: Cmd: webvpn
    
    csd enable
     ^
    ERROR: % Invalid input detected at '^' marker.
    fover_parse: parse_thread_helper: Cmd: csd enable
=============================

Conditions:
Failover is enabled, and configuring webvpn in above order on active ASA using ASDM
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.