Guest

Preview Tool

Cisco Bug: CSCup47581 - CSM: "Virtual sensor is not monitoring traffic" Msg N/A for ASA IPS Mods

Last Modified

Nov 10, 2016

Products (1)

  • Cisco Security Manager

Known Affected Releases

4.6(0)FCS1

Description (partial)

Symptom:
User encounters the following or similar (virtual sensor name may/will differ) message:

 "Description: Virtual sensor 'vs1' is not monitoring traffic.
  Cause: There are no logical or physical interfaces assigned to the virtual sensor.
  Action: Assign a logical or physical interface to the virtual sensor to monitor traffic."

Conditions:
Using an affected version of CSM (Cisco Security Manager) Configuration Manager client application to either:

 1.) Add/discover an ASA IPS sensor module on which multiple virtual sensors are configured.
 -or-
 2.) Configure additional virtual sensors on an ASA IPS sensor module via Device View > Policies > Virtual Sensors section.


For ASA IPS sensor modules (both hardware and software-based models), there is only a single physical sensing interface to assign to any one (1) virtual sensor. On these models, when multiple virtual sensors are configured, the additional virtual sensors are (by design) NOT assigned any physical sensing interface(s) and instead traffic is directed to the desired virtual sensor via the ASA's MPF configuration. Current (at the time of this writing) ASA IPS sensor modules for which this situation applies:

 -ASA-SSM-10
 -ASA-SSM-20
 -ASA-SSM-40
 -ASA5512-IPS
 -ASA5515-IPS
 -ASA5525-IPS
 -ASA5545-IPS
 -ASA5555-IPS
 -ASA5585-SSP-IPS10
 -ASA5585-SSP-IPS20
 -ASA5585-SSP-IPS40
 -ASA5585-SSP-IPS60
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.