|
CSCvo58100
|
Incorrect validation msg - Invalid value supplied for input
parameter : "?"
|
|
CSCvq20057
|
Improve logging of Secure Firewall (Firepower)backups and retry
for gzip when using remote storage
|
|
CSCvq25866
|
Flex config Preview of $SYS_FW_ENABLED_INSPECT_PROTOCOL_LIST
throws error
|
|
CSCvr45136
|
Adding details and logs when gzip fails and results in backup
failure
|
|
CSCvs27336
|
Traceback on ASA by Smart Call Home process
|
|
CSCvt35116
|
Cisco Firepower Management Center Software Information Disclosure
Vulnerability
|
|
CSCvu24703
|
FTD - Flow-Offload should be able to coexist with Rate-limiting
Feature (QoS)
|
|
CSCvu96436
|
Traceback of master and one slave when a particular lock is
contended for long
|
|
CSCvv59757
|
FMC event report generation fails if one is already running
|
|
CSCvw82067
|
ASA/FTD 9344 blocks depleted due to high volume of fragmented
traffic
|
|
CSCvx04436
|
Forbidden to run multiple SFDaCo processes, but pidfile not
successful at blocking second instance
|
|
CSCvx21458
|
FMC shows error when editing prefix-list attached to active
route-map within BGP protocol
|
|
CSCvx24207
|
FQDN Object Containing IPv4 and IPv6 Addresses Only Install IPv6
Entries
|
|
CSCvx27744
|
Policy deployment may fail on FTD after 6.6.1 due to failure to
get version upgrade information
|
|
CSCvx36885
|
ASA Traceback & reload in thread Name: DATAPATH
|
|
CSCvx52042
|
Upgrade to 6.6.1 got failed at
800_post/1025_vrf_policy_upgrade.pl
|
|
CSCvx55978
|
Performance Degradation in GetGroupDependency API
|
|
CSCvx56021
|
FTD: CTS SGT propagation gets enabled after reload
|
|
CSCvx59181
|
Email/SNMP/Syslog Health Alerts are not sent out of fmc for cpu
and mem
|
|
CSCvx65032
|
FMC ACL Search Move arrows do not work
|
|
CSCvx67856
|
Prometheus process doesnt come up when system ungracefully
rebooted
|
|
CSCvx71936
|
FXOS: Fault "The password encryption key has not been set."
displayed on FPR1000 and FPR2100 devices
|
|
CSCvx97723
|
hmdaemon process restart during automation test
|
|
CSCvy12991
|
Chassis local date and time may drift back to midnight Jan 1 2015
after reboot
|
|
CSCvy16537
|
Some externalization columns do not match any data when used in
where clause
|
|
CSCvy24435
|
FMC GUI can be accessed by an expired password when using .cgi
with https://FMCIP/login.cgi
|
|
CSCvy26511
|
Tune unmanaged disk alert thresholds for low end platforms
|
|
CSCvy26676
|
"Warning:Update failed/in-progress." Cosmetic after successful
update
|
|
CSCvy33879
|
FTD: repair_users.pl creates rogue .firstboot file that causes
FTD reboot failure
|
|
CSCvy35737
|
FTD traceback and reload during anyconnect package
verification
|
|
CSCvy40493
|
Selective policy deployment of AC Policy does not export to
ngfw.rules
|
|
CSCvy50598
|
BGP table not removing connected route when interface goes
down
|
|
CSCvy50797
|
Policy deployment may fail if platform settings contain DH group1
for SSL
|
|
CSCvy52617
|
FMC6.7 changes IPSec Profiles on VTI with each deployment
resulting in tunnel flap
|
|
CSCvy55676
|
FMC Deployment failed due to internal errors
|
|
CSCvy57905
|
VTI tunnel interface stays down post reload on KP/WM platform in
HA
|
|
CSCvy63414
|
Deploy Preview & Rollback not working when config archival is
corrupted
|
|
CSCvy65178
|
Need dedicated Rx rings for to the box BGP traffic on Firepower
platform
|
|
CSCvy65770
|
ASA/FTD: Traceback and reload during BGP route update
|
|
CSCvy67765
|
FTD VTI reports TUNNEL_SRC_IS_UP false despite source interface
is up/up and working
|
|
CSCvy73130
|
FP4100 platform: Active-Standby changed to dual Active after
running "show conn" command
|
|
CSCvy84336
|
Add a warning when member interfaces of the port-channel are
different between active and standby
|
|
CSCvy86817
|
Cruz ASIC CLU filter has the incorrect src/dst IP subnet when a
custom CCL IP subnet is set
|
|
CSCvy88023
|
FP2100 coredumps do not display the original crashing thread
|
|
CSCvy90836
|
ASA Traceback and reload in Thread Name: SNMP ContextThread
|
|
CSCvy91668
|
PAT pool exhaustion with stickiness traffic could lead to new
connection drop.
|
|
CSCvy98458
|
FP21xx -traceback "Panic:DATAPATH-10-xxxx -remove_mem_from_head:
Error - found a bad header"
|
|
CSCvz07712
|
Deployment fails with internal_errors - Cannot get fresh id
|
|
CSCvz09106
|
Cisco ASA and FTD Software SSL VPN Denial of Service
Vulnerability
|
|
CSCvz10428
|
FMC Health monitoring standby FMC unit does not have data
displayed for CPU
|
|
CSCvz20679
|
FTDv - Lina Traceback and reload
|
|
CSCvz22668
|
FMC backup restoration may fail due to VMS database restoration
failure
|
|
CSCvz24765
|
device rebooted with snmpd core
|
|
CSCvz28145
|
Error "Another operation by another user prevented this
operation. Please retry after sometime."
|
|
CSCvz29656
|
FMC connection event search causing high memory utilization for
index.cgi
|
|
CSCvz29976
|
Malware event processing may misbehave with "already part of
another table" error
|
|
CSCvz34289
|
In some cases transition to lightweight proxy doesn't work for Do
Not Decrypt flows
|
|
CSCvz36903
|
ASA traceback and reload while allocating a new block for cluster
keepalive packet
|
|
CSCvz37306
|
ASDM session is not served for new user after doing multiple
context switches in existing user
|
|
CSCvz38332
|
FTD/ASA - Stuck in boot loop after upgrade from 9.14.2.15 to
9.14.3
|
|
CSCvz38692
|
ASAv traceback in snmp_master_callback_thread and reload
|
|
CSCvz39646
|
ASA/AnyConnect - Stale RADIUS sessions
|
|
CSCvz40098
|
FTD HA: Health Monitor page shows "Error in fetching device
details Error: validation failed"
|
|
CSCvz40245
|
Firepower bandwidth_analyzer tool calculates results in MBps
instead of Mbps
|
|
CSCvz41551
|
FP2100: ASA/FTD with threat-detection statistics may traceback
and reload in Thread Name 'lina'
|
|
CSCvz42065
|
IPS policy should be imported when its referred in Access Control
policy
|
|
CSCvz42553
|
Alarm: Health Alert Smart Licensing Agent not running
|
|
CSCvz43414
|
Internal ldap attribute mappings fail after HA failover
|
|
CSCvz43455
|
ASAv observed traceback while upgrading hostscan
|
|
CSCvz44339
|
FTD - Deployment will fail if you try to delete an SNMP host with
ngfw-interface and host-group
|
|
CSCvz48407
|
Traceback and reload in Thread Name: DATAPATH-15-18621
|
|
CSCvz49163
|
Observed some time drift in seconds in the output when we execute
show rule hits multiple times
|
|
CSCvz50712
|
TLS server discovery uses incorrect source IP address for probes
in AnyConnect deployment
|
|
CSCvz51175
|
FTD HA not forming when SNMP adminState is disabled
|
|
CSCvz53142
|
ASA does not use the interface specified in the name-server
command to reach IPv6 DNS servers
|
|
CSCvz53372
|
Snort goes into D state after executing "config
log-events-to-ramdisk disable"
|
|
CSCvz54318
|
Policy deployment failure: "No LSP package found in the active
lsp directory"
|
|
CSCvz55302
|
FTD/ASA Traceback and reload due to SSL null checks under low
memory conditions
|
|
CSCvz55395
|
TCP connections are cleared after configured idle-timeout even
though traffic is present
|
|
CSCvz57710
|
conf t is converted to disk0:/t under context-config mode
|
|
CSCvz58710
|
ASA traceback due to SCTP traffic.
|
|
CSCvz60142
|
ASA/FTD stops serving SSL connections
|
|
CSCvz61160
|
ASA traceback on DATAPATH when handling ICMP error message
|
|
CSCvz61477
|
RAVPN Authorization fails if same RADIUS server is used as
authentication and authorization server
|
|
CSCvz62653
|
ASA memory leak resulting in error messages and causing
tracebacks
|
|
CSCvz64470
|
ASA/FTD Traceback and reload due to memory corruption when
generating ICMP unreachable message
|
|
CSCvz66236
|
Threshold mis-behavior of "-1" after configuring Type:Both for
specific rule
|
|
CSCvz67003
|
ASDM session count and quota management's count mismatch. 'Lost
connection firewall' msg in ASDM
|
|
CSCvz68713
|
PLR license reservation for ASAv5 is requesting ASAv10
|
|
CSCvz69571
|
ASA log shows wrong value of the transferred data after the
anyconnect session terminated.
|
|
CSCvz69729
|
Unstable client processes may cause LINA zmqio traceback on
FTD
|
|
CSCvz70316
|
LINA may generate traceback and reload
|
|
CSCvz70595
|
Cisco ASA Software and FTD Software Web Services Interface Denial
of Service Vulnerability
|
|
CSCvz71340
|
observed snort3 core on xTLSServerKeyExchangeProcessor
|
|
CSCvz71542
|
No messages displayed on the console for any inserted SFP cable
after removal.
|
|
CSCvz71596
|
"Number of interfaces on Active and Standby are not consistent"
should trigger warning syslog
|
|
CSCvz73709
|
ASA/FTD Standby unit fails to join HA
|
|
CSCvz75988
|
Inconsistent logging timestamp with RFC5424 enabled
|
|
CSCvz76652
|
Proxy URI URL for URL Filtering (beaker service) includes encoded
user/password strings
|
|
CSCvz77213
|
FTD: show ntp shows managing DC even though NTP sync is done via
FXOS
|
|
CSCvz77662
|
Crash at data-path from Scaled AC-SSL TVM Profile test.
|
|
CSCvz77744
|
OSPFv3: FTD Wrong "Forwarding address" added in ospfv3
database
|
|
CSCvz78548
|
Unable to load Devices --> Certificates page
|
|
CSCvz81480
|
Cisco ASA Software and FTD Software IPsec IKEv2 VPN Information
Disclosure Vulnerability
|
|
CSCvz81513
|
FMC - Backup failing due to "CSM backup failed"
|
|
CSCvz84850
|
ASA/FTD traceback and reload caused by "timer services"
function
|
|
CSCvz85493
|
FTD backup.log increased size out of control to 50GB or more
causing /ngfw to 100% full
|
|
CSCvz88020
|
ASAv: coredumpfsys is formatted during bootup
|
|
CSCvz91396
|
FTD: Deployment will fail when AC Policy is huge
|
|
CSCvz94841
|
Grammatical errors in failover operating mode mismatch error
message
|
|
CSCvz97196
|
Can't create Flexconfig Object with ldap-naming-attribute pager
cause pager is block.
|
|
CSCwa03341
|
Standby's sub interface mac doesn't revert to old mac with no
mac-address command
|
|
CSCwa04262
|
Cisco ASA Software SSL VPN Client-Side Request Smuggling
Vulnerability via "/"URI
|
|
CSCwa27253
|
FMC : Device Listing Page Slowness
|
|
CSCwa27488
|
Fail to import with error "is not a table"
|
|
CSCwa31488
|
FDM High Availability cannot be created using Etherchannel as
failover interface.
|
|
CSCwa32956
|
Connection events are not sent to Firepower Management Center due
to deploy race condition
|
|
CSCwa35596
|
Registered devices may miss on standby FMC due to AnyConnect
HostScan class files sync failure
|
|
CSCwa36535
|
Standby unit failed to join failover due to large config
size.
|
|
CSCwa41936
|
Cisco FTD Bleichenbacher Attack Vulnerability
|
|
CSCwa43311
|
Snort blocking and dropping packet, with bigger size(1G) file
download
|
|
CSCwa45369
|
Execution of commands appears to result in a new zombie
process
|
|
CSCwa47737
|
ASA/FTD may hit a watchdog traceback related to snmp config
writing
|
|
CSCwa49480
|
SNMP OID , stop working after around one hour and a half -
FTD
|
|
CSCwa59907
|
LINA observed traceback on thread name
"snmp_client_callback_thread"
|
|
CSCwa61361
|
ASAv traceback when SD_WAN ACL enabled, then disabled (or
vice-versa) in PBR
|
|
CSCwa62025
|
IPv6: Some of egress interfaces of global and user vrf routes are
missing in asp table
|
|
CSCwa68004
|
FMC 7.0 FlexConfig blocked mac-address-table aging-time for
transparent FTD without any alternativ
|
|
CSCwa68552
|
All type-8 passwords are lost upon upgrade from ASA 9.12-9.15 to
9.16, failover gets disabled
|
|
CSCwa72481
|
API key corrupted for FMC with multiple interfaces
|
|
CSCwa72528
|
user-name from certificate feature does not work with SER
option
|
|
CSCwa72530
|
FTD: Time gap/mismatch seen when new node joins a Cluster Control
node under history
|
|
CSCwa72929
|
SNMPv3 polling may fail using privacy algorithms
AES192/AES256
|
|
CSCwa73172
|
ASA reload and traceback in Thread Name: PIX Garbage
Collector
|
|
CSCwa75966
|
ASA: Reload and Traceback in Thread Name: Unicorn Proxy Thread
with Page fault: Address not mapped
|
|
CSCwa79604
|
Infinitely running jobs in the task list
|
|
CSCwa79905
|
FMC NAT Policy report generation does not record the rules every
51*x
|
|
CSCwa82850
|
ASA Failover does not detect context mismatch before declaring
joining node as "Standby ready"
|
|
CSCwa87298
|
ASA conn data-rate: incorrect "current rate" and
"data-rate-filter" doesn't work properly
|
|
CSCwa89116
|
Clean up session index handling in IKEv2/SNMP/Session-mgr for MIB
usage
|
|
CSCwa89560
|
NAT rule modification after rule search changes rule order
|
|
CSCwa94440
|
syncd process exits due to invalid GID and database
synchronization issue
|
|
CSCwa95079
|
ASA/FTD Traceback and reload due to NAT configuration
|
|
CSCwa96860
|
Failover high convergence causes traffic failures
|
|
CSCwa96920
|
ASA/FTD may traceback and reload in process Lina
|
|
CSCwa97423
|
Deployment rollback causes brief traffic drop due to order of
operations
|
|
CSCwa97917
|
ISA3000 in boot loop after powercycle
|
|
CSCwa99931
|
ASA/FTD: Tuning of update_mem_reference process
|
|
CSCwb00871
|
ENH: Reduce latency in log_handler_file to reduce watchdog under
scale or stress
|
|
CSCwb02060
|
snmp-group host with Invalid host range and subnet causing
traceback and reload
|
|
CSCwb02955
|
Modify /800_post/1027_ldap_external_auth_fix.pl to not fail FMC
upgrade when objects are corrupt
|
|
CSCwb03702
|
SSH: missing null pointer check leading to snort traceback and
reload
|
|
CSCwb03704
|
ASA/FTD datapath threads may run into deadlock and generate
traceback
|
|
CSCwb04000
|
ASA/FTD: DF bit is being set on packets routed into VTI
|
|
CSCwb04975
|
FTD Snort3 traceback in daq-pdts while handling FQDN based
traffic
|
|
CSCwb05148
|
Cisco ASA Software and FTD Software SNMP Denial of Service
Vulnerability
|
|
CSCwb05291
|
Cisco ASDM and ASA Software Client-side Arbitrary Code Execution
Vulnerability
|
|
CSCwb05920
|
Crash in KP at webVpn free, HTTPCleanUp and mem_mh_free from
Scaled AC-IK/IPSec TVM test.
|
|
CSCwb06575
|
Windows 11 OS is not selectable when creating a DAP record via
FMC
|
|
CSCwb06847
|
ASA/FTD may traceback and reload in Thread Name
'DATAPATH-9-11543'
|
|
CSCwb07908
|
Standby FTD/ASA sends DNS queries with source IP of 0.0.0.0
|
|
CSCwb07981
|
Traceback: Standby FTD reboots and generates crashinfo and lina
core on thread name cli_xml_server
|
|
CSCwb08189
|
Microsoft update traffic blocked with Snort version 3 Malware
inspection
|
|
CSCwb08644
|
ASA/FTD traceback and reload at IKEv2 from Scaled
S2S+AC-DTLS+SNMP long duration test
|
|
CSCwb09606
|
FP2100: ASA/FTD high availability is not resilient to unexpected
lacp process termination
|
|
CSCwb10874
|
Ensure DB consistency when synchronizing users
|
|
CSCwb12476
|
vm_max size for MonetDB is not set programmatically, which can
lead to a setting of zero
|
|
CSCwb16037
|
Unable to replace the anyconnect image when maximum memory used
for anyconnect images.
|
|
CSCwb16920
|
CPU profile cannot be reactivated even if previously active
memory tracking is disabled
|
|
CSCwb17187
|
SNMP cores are generated every minute while running snmpwalk on
HA
|
|
CSCwb17963
|
Unable to identify dynamic rate liming mechanism & not
following msg limit per/sec at syslog server.
|
|
CSCwb19387
|
ASA SNMP Poll is failing & show display "Unable to honour
this request now.Please try again later."
|
|
CSCwb19648
|
SNMP queries for crasLocalAddress are not returning the assigned
IPs for SSL/DTLS tunnels.
|
|
CSCwb20206
|
FTD: Logs and Debugs for SSL/TLS traffic drop due to NAP in
Detection Mode
|
|
CSCwb22592
|
SSH Functionalty stopped working after running long duration
tests of SCP + Scaled TVM VPN Profiles
|
|
CSCwb24039
|
ASA traceback and reload on routing
|
|
CSCwb24306
|
duplicate log entry for /mnt/disk0/log/asa_snmp.log
|
|
CSCwb25809
|
Single Pass - Traceback due to stale ifc
|
|
CSCwb28123
|
FTD HA deployment fails with error "Deployment failed due to
major version change on device"
|
|
CSCwb28427
|
ssl rule with appid condition may get matched incorrectly,
potentially causing connection failure
|
|
CSCwb31551
|
When inbound packet contains SGT header, FPR2100 cannot
distribute properly per 5 tuple
|
|
CSCwb31699
|
Primary takes active role after reload
|
|
CSCwb32267
|
Crash on KP Active node while clearing vpnsessiondb with
AnyConnect-SSL TVM Profile running
|
|
CSCwb32721
|
Syslog IDs 725021 and 725022 are not listed as valid IDs
|
|
CSCwb32790
|
Replace log4j with slf4j
|
|
CSCwb32841
|
NAT (any,any) statements in-states the failover interface and
resulting on Split Brain events
|
|
CSCwb38961
|
Bootstrap After Upgrade failed due to Duplicate Key of Network
Object
|
|
CSCwb40001
|
Long delays when executing SNMP commands
|
|
CSCwb41739
|
debug crypto conditional need to be made multi-ctx aware
|
|
CSCwb43018
|
Implement SNP API to check ifc and ip belongs to HA LU or CMD
interface
|
|
CSCwb43433
|
Jumbo frame performance has degraded up to -45% on Firepower 2100
series
|
|
CSCwb43629
|
License and rule counts telemetry data incorrectly generated for
HA managed devices
|
|
CSCwb44848
|
ASA/FTD Traceback and reload in Process Name: lina
|
|
CSCwb46481
|
SNMPv3 not working after upgrade of FMC
|
|
CSCwb50405
|
ASA/FTD Traceback in crypto hash function
|
|
CSCwb51707
|
ASA Traceback and reload in process name: lina
|
|
CSCwb51821
|
Disk usage errors on Firepower Azure device due to large backup
unified files under ngfw directory
|
|
CSCwb52401
|
Cisco Firepower Threat Defense Software Privilege Escalation
Vulnerability
|
|
CSCwb53172
|
FTD: IKEv2 tunnels flaps every 24 hours and crypto archives are
generated
|
|
CSCwb53191
|
Certificate validation fails post upgrade to 9.17.1
|
|
CSCwb53328
|
ASA/FTD Traceback and reload caused by Smart Call Home process
sch_dispatch_to_url
|
|
CSCwb54791
|
ASA DHCP server fails to bind reserved address to Linux
devices
|
|
CSCwb56905
|
ASA blocking 0.0.0.0 IP and netmask combination in
SSH/TELNET/HTTP config
|
|
CSCwb57213
|
FTD - Unable to resolve DNS when only diagnostic interface is
used for DNS lookups
|
|
CSCwb57615
|
Configuring pbr access-list with line number failed.
|
|
CSCwb58554
|
Resumed SSL sessions with uncached tickets may fail to
complete
|
|
CSCwb58817
|
FMC Deploying negative and positive form of BGP password command
across deployments
|
|
CSCwb59218
|
Unable to save DAP Endpoint Criteria as "Disabled"
|
|
CSCwb59465
|
ASA/FTD may traceback (watchdog) and reload when generating a
syslog from the VPN Failover subsystem
|
|
CSCwb59488
|
ASA/FTD Traceback in memory allocation failed
|
|
CSCwb61402
|
FMC: LDAP shell login may fail if LDAP server is slow to query
the DNS servers for users
|
|
CSCwb64551
|
FMC Backup failure- Monetdb backup failure code 102
|
|
CSCwb66761
|
Cisco Firepower Threat Defense Software Generic Routing
Encapsulation DoS Vulnerability
|
|
CSCwb67040
|
FP4112|4115 Traceback & reload on Thread Name:
netfs_thread_init
|
|
CSCwb68642
|
ASA traceback in Thread Name: SXP CORE
|
|
CSCwb69503
|
ASA unable to configure aes128-gcm@openssh.com when FIPS
enabled
|
|
CSCwb71460
|
ASA traceback in Thread Name: fover_parse and triggered by snmp
related functions
|
|
CSCwb73248
|
FW traceback in timer infra / netflow timer
|
|
CSCwb74571
|
PBR not working on ASA routed mode with zone-members
|
|
CSCwb76423
|
ASA/FTD traceback and reload when checking CRL
|
|
CSCwb78323
|
Update diskmanager to monitor cisco_uridb files in
/ngfw/var/sf/cloud_download folder.
|
|
CSCwb79812
|
RIP is advertising all connected Anyconnect users and not
matching route-map for redistribution
|
|
CSCwb80559
|
FTD offloads SGT tagged packets although it should not
|
|
CSCwb80862
|
ASA/FTD proxy arps any traffic when using the built-in 'any'
object in translated destination
|
|
CSCwb82796
|
ASA/FTD firewall may traceback and reload when tearing down IKE
tunnels
|
|
CSCwb83388
|
ASA HA Active/standby tracebacks seen approximately every two
months.
|
|
CSCwb83691
|
ASA/FTD traceback and reload due to the initiated capture from
FMC
|
|
CSCwb84901
|
CIAM: heimdal 1.0.1
|
|
CSCwb85633
|
Snmpwalk output of memory does not match show memory/show memory
detail
|
|
CSCwb86118
|
TPK ASA: Device might get stuck on ftp copy to disk
|
|
CSCwb87498
|
Lina traceback and reload during EIGRP route update
processing.
|
|
CSCwb87950
|
Cisco ASA Software and FTD Software Web Services Interface Denial
of Service Vulnerability
|
|
CSCwb88406
|
FMC-HA upgrade failure due to presence of this file
"update.status"
|
|
CSCwb88651
|
Cisco ASA and FTD Software RSA Private Key Leak Vulnerability
|
|
CSCwb88729
|
FTD - %FTD-3-199015: port-manager: Error: DOM Block Read failure,
port X, st = X log false/positive
|
|
CSCwb89963
|
ASA Traceback & reload in thread name: Datapath
|
|
CSCwb90074
|
ASA: Multiple Context Mixed Mode SFR Redirection Validation
|
|
CSCwb90532
|
ASA/FTD traceback and reload on NAT related function
nat_policy_find_location
|
|
CSCwb91101
|
SNMP interface threshold doesn't trigger properly when traffic
sent to interface ~4gbps
|
|
CSCwb91598
|
copying FMC backup to remote storage will fail if FMC has never
connected via SSH/SCP to remote host
|
|
CSCwb92709
|
We can't monitor the interface via "snmpwalk" once interface is
removed from context.
|
|
CSCwb93932
|
ASA/FTD failover pair traceback and reload due to connection
replication race condition
|
|
CSCwb94190
|
ASA graceful shut down when applying ACL's with forward reference
feature and FIPS enabled.
|
|
CSCwb94312
|
Unable to apply SSH settings to ASA version 9.16 or later
|
|
CSCwb95453
|
ASA: The timestamp for all logs generated by Admin context are
the same
|
|
CSCwb97251
|
ASA/FTD may traceback and reload in Thread Name 'ssh'
|
|
CSCwb97486
|
FPR3100: 25G optic may show link up on some 1/10G capable only
fiber ports
|
|
CSCwb99375
|
Config sync fails for command "quit"
|
|
CSCwc00115
|
FTD registration fails on on-prem FMC
|
|
CSCwc02488
|
ASA/FTD may traceback and reload in Thread Name 'None'
|
|
CSCwc02700
|
Fragmented packets are dropped when unit leaves cluster
|
|
CSCwc03069
|
Interface internal data0/0 is up/up from cli but up/down from
SNMP polling
|
|
CSCwc03332
|
FTD on FP2100 can take over as HA active unit during reboot
process
|
|
CSCwc03507
|
No-buffer drops on Internal Data interfaces despite little
evidence of CPU hog
|
|
CSCwc05434
|
FMC shows 'File Not Stored' after download a file
|
|
CSCwc07015
|
snort3 crash due to NULL pointer in TLS Client Hello
Evaluation
|
|
CSCwc07262
|
Standby ASA goes to booting loop during configuration replication
after upgrade to 9.16(3).
|
|
CSCwc08374
|
Azure ASA NIC MAC address for Gigeth 0/1 and 0/2 become out of
order when adding interfaces
|
|
CSCwc09414
|
ASA/FTD may traceback and reload in Thread Name 'ci/console'
|
|
CSCwc10483
|
ASA/FTD - Traceback in Thread Name:
appAgent_subscribe_nd_thread
|
|
CSCwc10792
|
ASA/FTD IPSEC debugs missing reason for change of peer address
and timer delete
|
|
CSCwc11511
|
FTD: SNMP failures after upgrade to 7.0.2
|
|
CSCwc11597
|
ASA tracebacks after SFR was upgraded to 6.7.0.3
|
|
CSCwc11663
|
ASA traceback and reload when modifying DNS inspection policy via
CSM or CLI
|
|
CSCwc13017
|
FTD/ASA traceback and reload at at ../inspect/proxy.h:439
|
|
CSCwc13477
|
FMC | Interface update Failed. Could not find source
interface
|
|
CSCwc13994
|
ASA - Restore not remove the new configuration for an interface
setup after backup
|
|
CSCwc18285
|
Conn data-rate command can be enabled or disabled in unprivileged
user EXEC mode
|
|
CSCwc18312
|
"show nat pool cluster" commands run within EEM scripts lead to
traceback and reload
|
|
CSCwc18524
|
ASA/FTD Voltage information is missing in the command "show
environment"
|
|
CSCwc18668
|
Failed user login on FMC does not record entry in audit log when
using external authentication
|
|
CSCwc19124
|
FMC Deployment does not start for cluster devices
|
|
CSCwc22170
|
Issue with snort perfstat parsing / Hmdeamon not starting after
disk full reported
|
|
CSCwc23356
|
ASA/FTD may traceback and reload in Thread Name
'DATAPATH-20-7695'
|
|
CSCwc23695
|
ASA/FTD can not parse UPN from SAN field of user's
certificate
|
|
CSCwc23844
|
ASAv high CPU and stack memory allocation errors despite over 30%
free memory
|
|
CSCwc24906
|
ASA/FTD traceback and reload on Thread id: 1637
|
|
CSCwc26648
|
ASA/FTD Traceback and Reload in Thread name Lina or Datatath
|
|
CSCwc27424
|
Unable to removed not used SAL On-Premise FMC configuration
|
|
CSCwc27797
|
ASA mgmt ip cannot be released
|
|
CSCwc27846
|
Traceback and Reload while HA sync after upgrading and
reloading.
|
|
CSCwc28334
|
Cisco ASA and FTD Software RSA Private Key Leak Vulnerability
|
|
CSCwc28532
|
9344 Block leak due to fragmented GRE traffic over inline-set
interface inner-flow processing
|
|
CSCwc28806
|
ASA Traceback and Reload on process name Lina
|
|
CSCwc28928
|
ASA: SLA debugs not showing up on VTY sessions
|
|
CSCwc30573
|
Deployment/Tasks Button not seen FMC_UI while doing upgrade tests
configured in Light theme
|
|
CSCwc32245
|
FMC: Validation check to prevent exponential expansion of NAT
rules
|
|
CSCwc32246
|
NAT64 translates all IPv6 Address to 0.0.0.0/0 when object subnet
0.0.0.0 0.0.0.0 is used
|
|
CSCwc33036
|
Observed Logs at syslog server side as more than configured
message limit per/sec.
|
|
CSCwc35181
|
OSPF template adds "default-information-originate" to area
<area-id> nssa statement on hitting OK.
|
|
CSCwc36905
|
ASA traceback and reload due to "Heap memory corrupted at
slib_malloc.c
|
|
CSCwc37256
|
SSL AnyConnect access blocked after upgrade
|
|
CSCwc38567
|
ASA/FTD may traceback and reload while executing SCH code
|
|
CSCwc39525
|
FMC HA status alert "degraded - maintenance" seen periodically
after upgrade
|
|
CSCwc40381
|
ASA : HTTPS traffic authentication issue with Cut-through Proxy
enabled
|
|
CSCwc41293
|
Firepower module show-tech file generation may fail with error
"Failed to create archive!"
|
|
CSCwc41592
|
False positives for Ultrasurf
|
|
CSCwc42174
|
CIAM: mariadb - multiple versions CVE-2022-32081
|
|
CSCwc42561
|
Deploy page listing takes 1.5 to 2 mins with 462 HA device
|
|
CSCwc43807
|
FTD is unusable post reboot if manager is deleted and FIPS is
enabled
|
|
CSCwc44289
|
FTD - Traceback and reload when performing IPv4 <> IPv6 NAT
translations
|
|
CSCwc44608
|
Selective deployment of IPS may cause outage due to incorrectly
written FTD configuration files
|
|
CSCwc45108
|
ASA/FTD: GTP inspection causing 9344 sized blocks leak
|
|
CSCwc45397
|
ASA HA - Restore in primary not remove new interface
configuration done after backup
|
|
CSCwc48375
|
Inbound IPSEC SA stuck inactive - many inbound SPIs for one
outbound SPI in "show crypto ipsec sa"
|
|
CSCwc48853
|
SFDataCorrelator Discovery Event bottleneck can cause Connection
Event delay and backlog
|
|
CSCwc49095
|
ASA/FTD 2100 platform traceback and reload when fragments are
coalesced and sent to PDTS
|
|
CSCwc49364
|
mojo_server processes unnecessarily restarting during log
rotation
|
|
CSCwc50519
|
Excessive logging from hm_du.pm may lead to syslog-ng process
restarts
|
|
CSCwc50846
|
FTD Upgrade Fail - Readiness Check Successful, but Readiness
status never shown
|
|
CSCwc50887
|
FTD - Traceback and reload on NAT IPv4<>IPv6 for UDP flow
redirected over CCL link
|
|
CSCwc50891
|
MPLS tagging removed by FTD
|
|
CSCwc51326
|
FXOS-based Firepower platform showing 'no buffer' drops despite
high values for RX ring watermarks
|
|
CSCwc51588
|
Failing to generate FMC Backup/Restore via SMB/SSH
|
|
CSCwc52351
|
ASA/FTD Cluster Split Brain due to NAT with "any" and Global
IP/range matching broadcast IP
|
|
CSCwc53280
|
ASA parser accepts incomplete network statement under OSPF
process and is present in show run
|
|
CSCwc54217
|
syslog related to failover is not outputted in FPR2140
|
|
CSCwc54901
|
Scheduled tasks may not run on active FMC in HA after switchover
or split-brain resolution
|
|
CSCwc54984
|
IKEv2 rekey - Responding Invalid SPI for the new SPI received
right after Create_Child_SA response
|
|
CSCwc56003
|
Trigger FTD backup with remote storage option enabled along with
retrieval to FMC fails
|
|
CSCwc56952
|
Able to see the SLA debug logs on both console & VTY sessions
even if we enable only on VTY session.
|
|
CSCwc57575
|
FMC: Scheduled backups working fine, but FMC email alerts
displaying it failed.
|
|
CSCwc60037
|
ASA fails to rekey with IPSEC ERROR: Failed to allocate an
outbound hardware context
|
|
CSCwc60227
|
FMC-GUI bypass session timeout while staying in any Event tab if
Refresh Interval is enabled
|
|
CSCwc61912
|
ASA/FTD OSPFv3 does not generate messages Type 8 LSA for IPv6
|
|
CSCwc62215
|
FTD unable to sync HA due to snort validation failed
|
|
CSCwc63273
|
SFDataCorrelator host timeout query can block event processing
and cause a deadlock restart
|
|
CSCwc64333
|
FMC GUI timeout and issues with loading http page due to exceeded
http connections
|
|
CSCwc64923
|
ASA/FTD may traceback and reload in Thread Name 'lina' ip routing
ndbshr
|
|
CSCwc66757
|
ASA/FTD may traceback and reload in Thread Name 'lina'
|
|
CSCwc67687
|
ASA HA failover triggers HTTP server restart failure and ASDM
outage
|
|
CSCwc67886
|
ASA/FTD may traceback and reload in Thread Name
'lina_inotify_file_monitor_thread'
|
|
CSCwc68543
|
mismatch in the config pushed from FMC and running config on
FTD
|
|
CSCwc68656
|
ASA CLI for TCP Maximum unprocessed segments
|
|
CSCwc69583
|
Portchannel configured from FDM breaks "Use the Data Interfaces
as the Gateway" for Mgmt interface
|
|
CSCwc70962
|
FTD/ASA "Write Standby" enables ECDSA ciphers causing AC SSLv3
handshake failure
|
|
CSCwc72155
|
ASA/FTD Traceback and reload on function
"snp_cluster_trans_allocb"
|
|
CSCwc72284
|
TACACS Accounting includes an incorrect IPv6 address of the
client
|
|
CSCwc73224
|
Call home configuration on standby device is lost after
reload
|
|
CSCwc74099
|
FPR2140 ASA Clock Timezone reverts to UTC after appliance
restart/reload
|
|
CSCwc74103
|
ASA/FTD may traceback and reload in Thread Name
'DATAPATH-11-32591'
|
|
CSCwc74271
|
Auth-Daemon process is getting restarted continuously when SSO
disabled
|
|
CSCwc74378
|
FMC UI should disallow simultaneous deactivation of FMC interface
management and event channels
|
|
CSCwc74841
|
FMC RSS Feed broken because FeedBurner is no longer active -
"Unable to parse feed"
|
|
CSCwc74858
|
FTD - Traceback in Thread Name: DATAPATH
|
|
CSCwc77519
|
FPR1000 ASA/FTD: Primary takes active role after reloading
|
|
CSCwc77680
|
FTD may traceback and reload in Thread Name 'DATAPATH-0-4948'
|
|
CSCwc79366
|
During the deployment time, device got stuck processing the
config request.
|
|
CSCwc80234
|
"inspect snmp" config difference between active and standby
|
|
CSCwc80357
|
[Deploy Performance] degrade in deployment page on FMC
|
|
CSCwc81184
|
ASA/FTD traceback and reload caused by SNMP process failure
|
|
CSCwc81219
|
Intrusion events intermittently stop appearing in FMC when using
snort3
|
|
CSCwc81727
|
Default Domain in VPN group policy objects cannot be deleted
|
|
CSCwc81960
|
Unable to configure 'match ip address' under route-map when using
object-group in access list
|
|
CSCwc82188
|
FTD Traceback and reload when applying long commands from FMC UI
or CLISH
|
|
CSCwc86330
|
Vulnerabilities in spring-framework - multiple versions
CVE-2022-22970
|
|
CSCwc86391
|
On slow networks with some packets loss sftunnel may mark
connections as STALE
|
|
CSCwc87441
|
for system processes limit the CPUs used to the number of system
CPUs
|
|
CSCwc88108
|
Prefilter policy - Available port menu long response time,
Prefilter Network Search takes long time
|
|
CSCwc88897
|
ASA traceback and reload due to null pointer in Umbrella after
modifying DNS inspection policy
|
|
CSCwc89661
|
FTD reboots due to heartbeat loss and "Communication with NPU
lost"
|
|
CSCwc89796
|
ASA/FTD may traceback and reload in Thread Name
'appagent_async_client_receive_thread' hog detection
|
|
CSCwc89924
|
FXOS ASA/FTD SNMP OID to poll Internal-data 'no buffer' interface
counters
|
|
CSCwc90091
|
ASA 9.12(4)47 with user-statistics, will affects the
"policy-server xxxx global" visibility.
|
|
CSCwc92761
|
7.3 - Message flood by Use of uninitialized value $unix_time in
numeric gt
|
|
CSCwc93166
|
Using write standby in a user context leaves secondary firewall
license status in an invalid state
|
|
CSCwc93687
|
Error message while editing ACP
|
|
CSCwc94085
|
Unable to establish DTLSv1.2 with FIPS enabled after upgrade from
6.6.5.
|
|
CSCwc94466
|
Cisco ASA/FTD Firepower 2100 SSL/TLS Denial of Service
Vulnerability
|
|
CSCwc94501
|
ASA/FTD memory leak and tracebacks due to ctm_n5 resets
|
|
CSCwc95290
|
ESP rule missing in vpn-context may cause IPSec traffic drop
|
|
CSCwc96016
|
Captive portal support in cross domain
|
|
CSCwc96805
|
traceback and reload due to tcp intercept stat in thread
unicorn
|
|
CSCwc99242
|
ISA3000 LACP channel member SFP port suspended after reload
|
|
CSCwd00386
|
ASA/FTD may traceback and reload when clearing the configration
due to "snp_clear_acl_log_flow_all"
|
|
CSCwd00778
|
ifAdminStatus output is abnormal via snmp polling
|
|
CSCwd01032
|
ASA/FTD may traceback and reload when RAVPN with SAML is
configured
|
|
CSCwd02864
|
logging/syslog is impacted by SNMP traps and logging history
|
|
CSCwd03113
|
FMC local backup fails cause of "Update Task: Database integrity
check failed" - Syslog server issue
|
|
CSCwd03793
|
FTD Traceback and reload
|
|
CSCwd03810
|
ASA Custom login page is not working through webvpn after an
upgrade
|
|
CSCwd04210
|
ASA: ASDM sessions stuck in CLOSE_WAIT causing lack of MGMT
|
|
CSCwd05814
|
PDTS write from Daq can fail when PDTS buffer is full eventually
leads to block depletion
|
|
CSCwd06005
|
ASA/FTD Cluster Traceback and Reload during node leave
|
|
CSCwd07059
|
multiple snort3 crashes after upgrading FTD from 7.2.0 to
7.2.0.1
|
|
CSCwd08430
|
Create a resiliency configuration option for SFTunnel to support
HA and FTD connectivity
|
|
CSCwd10121
|
Invalid query seen in MonetDB merovingian.log
|
|
CSCwd10497
|
FTD sensor rules missing from ngfw.rules file after a sensor
backup restore execution
|
|
CSCwd10760
|
Firewall_rule_cache may not pruned for many years for some
customers
|
|
CSCwd10880
|
critical health alerts 'user
configuration(FSM.sam.dme.AaaUserEpUpdateUserEp)' on 2100/3100
devices
|
|
CSCwd11005
|
Missing fqdns_old.conf file causes FTD HA app sync failure
|
|
CSCwd11165
|
"Move" option is greyed out on Backup-Restore in FMC
|
|
CSCwd11303
|
ASA might generate traceback in ikev2 process and reload
|
|
CSCwd11855
|
ASA/FTD may traceback and reload in Thread Name
'ikev2_fo_event'
|
|
CSCwd11963
|
Error message seen in the log "Error operation timed out getting
CriticalStatus from PM."
|
|
CSCwd13083
|
FMC - Unable to initiate deployment due to incorrect threat
license validation
|
|
CSCwd13917
|
during download from file event on FMC, high CPU use on FMC for
20 minutes before download fails
|
|
CSCwd14432
|
"Inspection Interruption" is seen as YES but snort3 didn't
restart
|
|
CSCwd14688
|
FTD upgrade failure due to Syslog files getting generated/deleted
rapidly
|
|
CSCwd14972
|
ASA/FTD Traceback and Reload in Thread Name:
pix_flash_config_thread
|
|
CSCwd16017
|
Object edit slowness when it is associated with NAT rules
|
|
CSCwd16294
|
GTP inspection drops packets for optional IE Header Length being
too short
|
|
CSCwd16517
|
GTP drops not always logged on buffer and syslog
|
|
CSCwd16689
|
ASA/FTD traceback due to block data corruption
|
|
CSCwd16712
|
Device readiness upgrade check failure - sftunnel sync issue due
to time change
|
|
CSCwd16902
|
File events show Action as "Malware Block" for files with correct
disposition of unknown
|
|
CSCwd17037
|
SFDataCorrelator RNA-Stop action should not block when database
operations are hung
|
|
CSCwd17856
|
ASA goes for traceback/reload with message -
snmp_ma_kill_restart: vf is NULL
|
|
CSCwd17940
|
HA did not failover due to misleading status updates from
NDClient
|
|
CSCwd18744
|
FPR1K FTD fails to form HA due to reason "Other unit has
different set of hwidb index"
|
|
CSCwd19053
|
ASA/FTD may traceback with large number of network objects
deployment using distribute-list
|
|
CSCwd20627
|
ASA/FTD: NAT configuration deployment failure
|
|
CSCwd20900
|
HTTP Block Response and Interactive Block response pages not
being displayed by Snort3
|
|
CSCwd22413
|
EIGRPv6 - Crashed with "mem_lock: Assertion mem_refcount' failed"
on LINA.
|
|
CSCwd22907
|
ASA/FTD High CPU in SNMP Notify Thread
|
|
CSCwd23188
|
ASA/FTD may traceback and reload in Thread Name 'lina'
|
|
CSCwd23913
|
FTD in HA traceback multiple times after adding a BGP neighbour
with prefix list.
|
|
CSCwd25201
|
ASA/FTD SNMP traps enqueued when no SNMP trap server
configured
|
|
CSCwd25256
|
ASA/FTD Transactional Commit may result in mismatched rules and
traffic loss
|
|
CSCwd26466
|
Incorrect Frequent Drain of Connection Events alert
|
|
CSCwd26867
|
Device should not move to Active state once Reboot is
triggered
|
|
CSCwd28236
|
standby unit using both active and standby IPs causing duplicate
IP issues due to nat "any"
|
|
CSCwd29835
|
log rotate failing to cycle files, resulting in large file
sizes
|
|
CSCwd30296
|
Device Metrics Not Working After Upgrade to 7.0.3 from pre -7.0.0
version
|
|
CSCwd30298
|
FTD: FTPS Data Channel connection impacted by TLS Server Identity
and Discovery Probe sent by FTD
|
|
CSCwd30774
|
FMC HA - files in tmp/Sync are left on secondary when
synchronisation task fails
|
|
CSCwd30977
|
FMC deleted some access-rules due to an incorrect delta generated
during the policy deployment.
|
|
CSCwd31181
|
Lina traceback and reload - VPN parent channel (SAL) has an
invalid underlying channel
|
|
CSCwd32952
|
Active and Standby device details not available in FMC logs
during FTD HA break
|
|
CSCwd33054
|
DHCP Relay is looping back the DHCP offer packet causing
dhcprelay to fail on the FTD/ASA
|
|
CSCwd33811
|
Cluster registration is failing because DATA_NODE isn't joining
the cluster
|
|
CSCwd34288
|
FP1000 - During boot process in LINA mode, broadcasts leaked
between interfaces resulting in storm
|
|
CSCwd34662
|
LTS18 and LTS21 commit id update in CCM layer (seq 39)
|
|
CSCwd37238
|
TLS connections to Exchange 2007 server may fail
|
|
CSCwd38526
|
FMC can allow deployment of NAP in test mode with Decrypt
policy
|
|
CSCwd38774
|
ASA: Traceback and reload due to clientless webvpn session
closure
|
|
CSCwd38775
|
ASA/FTD may traceback and reload in Thread lina
|
|
CSCwd38805
|
Syslog 106016 is not rate-limited by default
|
|
CSCwd39039
|
FMC - Error message "The server response was not understood.
Please contact support." on UI
|
|
CSCwd39468
|
ASA/FTD Traceback and reload when configuring ISAKMP captures on
device
|
|
CSCwd39506
|
SSL Policy DND default Rule fails on error unsupported cipher
suite and SKE error.
|
|
CSCwd40141
|
Firepower Management Center GUI view for Snort2 Local Intrusion
Rules is missing
|
|
CSCwd40260
|
Serviceability Enhancement - Unable to parse payload are silently
drop by ASA/FTD
|
|
CSCwd41083
|
ASA traceback and reload due to DNS inspection
|
|
CSCwd41224
|
FMC HA webUI is not getting FTDv Variable tier assigned FTDv -
Variable
|
|
CSCwd41466
|
Re-downloaded users from a forest with trusted domains may become
unresolved/un-synchronized
|
|
CSCwd41806
|
deployment failed with OOM (out of memory) for policy_apply.pl
process
|
|
CSCwd42072
|
SRU installation failure.
|
|
CSCwd42347
|
FMC not showing any alerts/warnings when deploying changes of
prefix list with same seq #
|
|
CSCwd43666
|
Analyze why there is no logrotate for
/opt/cisco/config/var/log/ASAconsole.log
|
|
CSCwd44326
|
Object NAT edit is failing
|
|
CSCwd46741
|
fxos log rotate failing to cycle files, resulting in large file
sizes
|
|
CSCwd46780
|
ASA/FTD: Traceback and reload in Thread Name:
appAgent_reply_processor_thread
|
|
CSCwd47340
|
FXOS: memory leak in svc_sam_envAG process
|
|
CSCwd47424
|
Device name always shows as 'firepower' in CDO event view
|
|
CSCwd47442
|
800_post/1027_ldap_external_auth_fix.pl upgrade error --
reference to missing authentication object
|
|
CSCwd47481
|
WR6, WR8, LTS18 and LTS21 commit id update in CCM layer (Seq
40)
|
|
CSCwd48633
|
ASA - traceback and reload when Webvpn Portal is used
|
|
CSCwd49685
|
Missing SSL MEMCAP causes deployment failure due timeout waiting
for snort detection engines
|
|
CSCwd50131
|
Upgrades are not cleaning up mysql files leading to alert for
'High unmanaged disk usage on /ngfw'
|
|
CSCwd50218
|
ASA restore is not applying vlan configuration
|
|
CSCwd51757
|
Unable to get polling results using snmp GET for connection rate
OID’s
|
|
CSCwd51964
|
Add validation in lua detector api to check for empty patterns
for service apps
|
|
CSCwd53135
|
ASA/FTD: Object Group Search Syslog for flows exceeding
threshold
|
|
CSCwd53340
|
FTD PDTS LINA RX queue can become stuck when snort send messages
with 4085-4096 bytes size
|
|
CSCwd53863
|
Data migration from Sybase to MariaDB taking more time due to
large data size of POLICY_SNAPSHOT
|
|
CSCwd54439
|
FMC gives an irrelevant error message for Snort2 to Snort3 rules
conversion failure
|
|
CSCwd55673
|
Need corrections in log_handler_file watchdog crash fix
|
|
CSCwd55853
|
Deployment failure with localpool overlap error after upgrade
|
|
CSCwd56254
|
"show tech-support" generation does not include "show inventory"
when run on FTD
|
|
CSCwd56296
|
FTD Lina traceback and reload in Thread Name 'IP Init Thread'
|
|
CSCwd56431
|
Disable asserts in FTD production builds
|
|
CSCwd56774
|
Misleading drop reason in "show asp drop"
|
|
CSCwd56995
|
Clientless Accessing Web Contents using application/octet-stream
vs text/plain
|
|
CSCwd57698
|
Recursive panic under lina_duart_write
|
|
CSCwd58188
|
Inline-pair's state could not able to auto recover from
hardware-bypass to standby mode.
|
|
CSCwd58337
|
allocate more cgroup memory for policy deployment subgroup
|
|
CSCwd58417
|
HA Periodic sync is failing due to cfg files are missing
|
|
CSCwd58430
|
At times AC Policy save takes longer time, may be around 10 or
above mins
|
|
CSCwd58528
|
Memory depletion while running EMIX traffic profile on QP HA
active node
|
|
CSCwd59736
|
ASA/FTD: Traceback and reload due to SNMP group configuration
during upgrade
|
|
CSCwd61016
|
ASA: Standby may get stuck in "Sync Config" status upon reboot
when there is EEM is configured
|
|
CSCwd61082
|
FMC UI Showing inaccurate data in S2S VPN Monitoring page
|
|
CSCwd61410
|
mdbtrace.log can fill storage on FMC
|
|
CSCwd62025
|
FTDv: Policy Deployment failure due to interface setting on
failover interface
|
|
CSCwd62138
|
ASA Connections stuck in idle state when DCD is enabled
|
|
CSCwd62729
|
FDM QW/QP: All URL traffic blocked in BAT/BQT test
|
|
CSCwd62915
|
Cross-domain users with non-ASCII characters are not resolved
|
|
CSCwd63580
|
FPR2100: Increase in failover convergence time with ASA in
Appliance mode
|
|
CSCwd63961
|
AC clients fail to match DAP rules due to attribute value too
large
|
|
CSCwd64919
|
FXOS is not rotating PoE logs
|
|
CSCwd65327
|
WR6, WR8, LTS18 and LTS21 commit id update in CCM layer (Seq
41)
|
|
CSCwd66815
|
Lina changes to support - Snort3 traceback in daq-pdts while
handling FQDN based traffic
|
|
CSCwd67101
|
FPR1150 : Exec format error seen and the device hung until reload
when erase secure all is executed
|
|
CSCwd68088
|
ASA|FTD: Implement different TLS diffie-hellman prime based on
RFC recommendation
|
|
CSCwd69236
|
FMC Connection Event stop displaying latest event
|
|
CSCwd69454
|
Port-channel interfaces of secondary unit are in waiting status
after reload
|
|
CSCwd72656
|
FMC GUI takes long time to load Intrusion Event packet view
|
|
CSCwd72680
|
FXOS: FP2100 FTW timeout triggered by high CPU usage during FTD
Access Control Policy deploy.
|
|
CSCwd72915
|
FMC 7.1.0.1 Doesn't throw warning that S2S VPN Configs contain
deprecated MD5 Hash during deployment
|
|
CSCwd73981
|
FMC: Updates page takes more than 5 minutes to load
|
|
CSCwd74116
|
S2S Tunnels do not come up due to DH computation failure caused
by DSID Leak
|
|
CSCwd74648
|
External authentication with Radius server fail with error "This
account is currently not available"
|
|
CSCwd74839
|
30+ seconds data loss when unit re-join cluster
|
|
CSCwd75738
|
Predefined FlexConfig Text Objects are not exported by
Import-Export
|
|
CSCwd75912
|
ASA SFR is failing registration or not sending events to FMC
|
|
CSCwd76634
|
FMC import takes too long
|
|
CSCwd78123
|
ASA/FTD traceback and reload when IPSec/Ikev2 vpn session bringup
with dh group 31 in fips mode
|
|
CSCwd78624
|
ASA configured with HA may traceback and reload with multiple
input/output error messages
|
|
CSCwd78940
|
Traps are not getting generated in UUT for config change in
multicontext
|
|
CSCwd79388
|
intrusion events fail to migrate from MariaDB to MonetDB
following FMC upgrade from 7.0.3 to 7.1.0
|
|
CSCwd80343
|
MI FTD running 7.0.4 is on High disk utilization
|
|
CSCwd81384
|
FMC upgrade fails: 114_DB_table_data_integrity_check.pl, stating
Snort2IPSNAPCleanup.pm not be found
|
|
CSCwd81538
|
FTD Traffic failure due to 9344 block depletion in
peer_proxy_tx_q
|
|
CSCwd81897
|
Snort3 crash seen sometimes while processing a future flow
connection after appid detectors reload
|
|
CSCwd82235
|
LINA Traceback on FPR-1010 under Thread Name:
update_cpu_usage
|
|
CSCwd82801
|
Snort outputs massive volume of packet events - IPS event view
may show "No Packet Information"
|
|
CSCwd83956
|
snort2 does not match rules based on application SMTP/SMTPS
anymore after a while
|
|
CSCwd83990
|
FTD -Snort match incorrect NAP id for traffic
|
|
CSCwd84133
|
ASA/FTD may traceback and reload in Thread Name 'telnet/ci'
|
|
CSCwd84868
|
Observing some devcmd failures and checkheaps traceback when flow
offload is not used.
|
|
CSCwd85178
|
AWS ASAv PAYG Licensing not working in GovCloud regions.
|
|
CSCwd85609
|
FTDs running 6.6.x show as disconnected on new HM (6.7+) but
checks are running and updating
|
|
CSCwd85927
|
Traceback and reload when webvpn users match DAP access-list with
36k elements
|
|
CSCwd86313
|
Unable to access Dynamic Access policy
|
|
CSCwd86457
|
Number of objects are not getting updated under
policies>>>Security intelligence >>>Block list
|
|
CSCwd86929
|
Cut-Through Proxy does not work with HTTPS traffic
|
|
CSCwd88585
|
ASA/FTD NAT Pool Cluster allocation and reservation discrepancy
between units
|
|
CSCwd88641
|
Deployment changes to push VDB package based on Device model and
snort engine
|
|
CSCwd89349
|
WR6, WR8, LTS18 and LTS21 commit id update in CCM layer (seq
42)
|
|
CSCwd90112
|
MariaDB crash (segmentation fault) related to netmap query
|
|
CSCwd91013
|
FMC | Deployment failure in csm_snapshot_error
|
|
CSCwd91421
|
ASA/FTD may traceback and reload in logging_cfg processing
|
|
CSCwd92804
|
FAN LED flashing amber on FPR2100
|
|
CSCwd93316
|
No Inspect Interruption warning when deploy after FMC upgrade
|
|
CSCwd93376
|
Clientless VPN users are unable to download large files through
the WebVPN portal
|
|
CSCwd93792
|
SFDataCorrelator performance degradation involving hosts with
many discovered MAC addresses
|
|
CSCwd94096
|
Anyconnect users unable to connect when ASA using different
authentication and authorization server
|
|
CSCwd94183
|
Blade not coming up after FXOS update support on multi-instance
due to ssp_ntp.log log rotation prob
|
|
CSCwd95415
|
The Standby Device going in failed state due to snort heartbeat
failure
|
|
CSCwd95436
|
Primary ASA traceback upon rebooting the secondary
|
|
CSCwd95908
|
ASA/FTD traceback and reload, Thread Name: rtcli async executor
process
|
|
CSCwd96041
|
FMC SecureX via proxy stops working after upgrade to 7.x
|
|
CSCwd96493
|
Link Up seen for a few seconds on FPR1010 during bootup
|
|
CSCwd96755
|
ASA is unexpected reload when doing backup
|
|
CSCwd96766
|
41xx: Blade does not capture or log a reboot signal
|
|
CSCwd96790
|
High FMC backup file size due to configurations snapshot for all
managed devices
|
|
CSCwd97020
|
ASA/FTD: External IDP SAML authentication fails with Bad Request
message
|
|
CSCwd97276
|
Unified events and connection events pages don't load anymore. DB
Cores generated every few minutes
|
|
CSCwe00757
|
Summary status dashboard takes more than 3 mins to load upon
login
|
|
CSCwe00828
|
Interactive Block action doesn't work when websites are
redirected to https
|
|
CSCwe00864
|
License Commands go missing in Cluster data unit if the Cluster
join fails.
|
|
CSCwe03529
|
FTD traceback and reload while deploying PAT POOL
|
|
CSCwe03991
|
FTD/ASA traceback and reload during to tmatch compilation
process
|
|
CSCwe04437
|
collection of top.log.gz in troubleshoot can be corrupt due to
race condition
|
|
CSCwe05913
|
FTD traceback/reloads - Icmp error packet processing involves
snp_nat_xlate_identity
|
|
CSCwe06724
|
Database table optimization not working for some of the
tables
|
|
CSCwe06826
|
Email alert incorrectly send for a successful database backup
|
|
CSCwe06828
|
FMC HA Synchronization can hang forever if no response from
SendUserReloadSGTAndEndpointsEvent
|
|
CSCwe07103
|
FMC: Upgrade fails at DB Integrity check due to large number of
EO warnings for "rule_comments"
|
|
CSCwe07722
|
Cluster data unit drops non-VPN traffic with ASP reason "VPN
reclassify failure
|
|
CSCwe07928
|
On a cloud-delivered FMC there is no way to send events to syslog
without sending to SAL/CDO as well
|
|
CSCwe08729
|
FPR1120:connections are getting teardown after switchover in
HA
|
|
CSCwe08908
|
Threatgrid integration configuration is not sync'd as part of the
FMC HA Synchronisation
|
|
CSCwe09074
|
None option under trustpoint doesn't work when CRL check is
failing
|
|
CSCwe09811
|
FTD traceback and reload during policy deployment
adding/removing/editing of NAT statements.
|
|
CSCwe11119
|
ASA: Traceback and reload while processing SNMP packets
|
|
CSCwe11189
|
monetdb log use all of disk spaces on /Volume
|
|
CSCwe11304
|
Snort crashing on FTD
|
|
CSCwe11727
|
Purging of Config Archive failed for all the devices if one
device has no versions
|
|
CSCwe12407
|
High Lina memory use due to leaked SSL handles
|
|
CSCwe13627
|
FMC Unable to fetch VPN troubleshooting logs.
|
|
CSCwe14062
|
FTD/Lina or ASA traceback and reload related to thread
ctm_qat_engine
|
|
CSCwe14174
|
FTD - 'show memory top-usage' providing improper value for memory
allocation
|
|
CSCwe14514
|
ASA/FTD Traceback and reload of Standby Unit while removing
capture configurations
|
|
CSCwe15164
|
ASA: ASDM cannot display SFR tabs until it's "woken up" through
its CLI.
|
|
CSCwe16620
|
FMC Health Monitor does not report alerts for the Interface
Status module
|
|
CSCwe18090
|
FMC deployment failure:"Validation failed: This is a slav*/ha
standby device, rejecting deployment."
|
|
CSCwe18859
|
After device registration or FMC upgrade, devices sometimes don't
send events to the FMC
|
|
CSCwe18974
|
ASA/FTD may traceback and reload in Thread Name: CTM Daemon
|
|
CSCwe20043
|
256-byte memory block gets depleted on start if jumbo frame is
enabled with FTD on ASA5516
|
|
CSCwe20714
|
Traffic drop when primary device is active
|
|
CSCwe21037
|
Snort mem used alert should be consistent with value from
top.log
|
|
CSCwe21187
|
ASA/FTD may drop multicast packets due to no-mcast-intrf ASP drop
reason until UDP timeout expires
|
|
CSCwe21280
|
Multicast connection built or teardown syslog messages may not
always be generated
|
|
CSCwe21959
|
Snort3: Process in D state resulting in OOM with jemalloc memory
manager
|
|
CSCwe22216
|
Maria DB crashing/holding high CPU and not allowing users to
login GUI and CLI
|
|
CSCwe22254
|
After disabling malware analysis, high disk usage on
/dev/shm/snort
|
|
CSCwe22302
|
Partition "/opt/cisco/config" gets full due to wtmp file not
getting logrotated
|
|
CSCwe22492
|
Slow UI loading for Table View of Hosts
|
|
CSCwe22980
|
Database integrity check takes several minutes to complete
|
|
CSCwe23039
|
NTP polling frequency changed from 5 minutes to 1 second causes
large useless log files
|
|
CSCwe23139
|
FTD HA does not break from FMC GUI but HA bootstrap is removed
from devices
|
|
CSCwe23801
|
FPR2100: Mulitple snort3 & snort2 cores got generated and
sensor goes down in KP platform
|
|
CSCwe24532
|
Multiple instances of nvram.out log rotated files under
/opt/cisco/platform/logs/
|
|
CSCwe24880
|
Using proxy authentication in FMC for smart licensing is failing
after upgrading to 7.0.5
|
|
CSCwe25187
|
FMC External authentication getting "Internal error"
|
|
CSCwe28094
|
ASA/FTD may traceback and reload after executing 'clear counters
all' when VPN tunnels are created
|
|
CSCwe28726
|
The command "app-agent heartbeat" is getting removed when
deleting any created context
|
|
CSCwe29179
|
CLUSTER: ICMP reply arrives at director earlier than CLU add flow
request from flow owner.
|
|
CSCwe29381
|
Sybase arbiter is not up on FMC HA
|
|
CSCwe29498
|
occasional failure to load light-modal-ac-rule-xx.css with a
net::ERR_TOO_MANY_RETRIES error
|
|
CSCwe29529
|
FTD MI does not adjust PVID on vlans attached to BVI
|
|
CSCwe29583
|
ASA/FTD may traceback and reload in Thread Name 'None' at
lua_getinfo
|
|
CSCwe29850
|
ASA/FTD Show chunkstat top command implementation
|
|
CSCwe29952
|
SFDataCorrelator cores due to stuck database query after 1 hour
deadlock timeout
|
|
CSCwe30228
|
ASA/FTD might traceback in funtion "snp_fp_l2_capture_internal"
due to cf_reinject_hide flag
|
|
CSCwe30653
|
FTD upgrade failure at "999_finish/999_zz_install_bundle.sh" due
to bad key cert
|
|
CSCwe30867
|
Workaround to set hwclock from ntp logs on low end platforms
|
|
CSCwe32375
|
7.0 - Snort3 process in D state and outage due to OOM
|
|
CSCwe32448
|
changing time window settings in FMC GUI event viewers may not
work with FMC integrated with SecureX
|
|
CSCwe32537
|
ASDM Managed SFR modules 7.0.5 upgrade failure in
114_Snort_table_data_integrity_check.pl
|
|
CSCwe36176
|
ASA/FTD: High failover delay with large number of (sub)interfaces
and http server enabled
|
|
CSCwe38029
|
Multiple traceback seen on standby unit.
|
|
CSCwe38585
|
FMC + FTD's Upgrade to 7.0.4(5) version from pre -7.0.0 version
creates 7.2.0 configurations on FMC
|
|
CSCwe38640
|
EventHandler warnings if syslog facility is CONSOLE
|
|
CSCwe39425
|
2100: Power switch toggle leads to ungraceful shutdowns and
"PowerCycleRequest" reset
|
|
CSCwe40463
|
Stale IKEv2 SA formed during simultaneous IKE SA handling when
missing delete from the peer
|
|
CSCwe41898
|
ASA: FP2100 FTW timeout triggered by high CPU usage during FTD
Access Control Policy deploy.
|
|
CSCwe44311
|
FP2100:Update LINA asa.log files to avoid recursive
messages-<date>.1.gz rotated filenames
|
|
CSCwe44620
|
Question mark in NAT description causes config mismatch on Data
members of an FTD cluster
|
|
CSCwe44672
|
Syslog ASA-6-611101 is generated twice for a single ssh
connection
|
|
CSCwe44766
|
IMS: FP2100 FTW timeout triggered by high CPU usage during FTD
Access Control Policy deploy.
|
|
CSCwe45779
|
ASA/FTD drops traffic to BVI if floating conn is not default
value due to no valid adjacency
|
|
CSCwe45879
|
Frequent errors seen regarding failures to load bulkcsv files
that don't exist
|
|
CSCwe48378
|
Remove FMC drop_cache trigger to prevent Disk I/O increase due to
file cache thrashing
|
|
CSCwe48432
|
Unable to save Access Control Policy changes due to Internal
error
|
|
CSCwe49185
|
Generate password does not meet requirements while in CC mode
|
|
CSCwe50993
|
SNMP on SFR module goes down and won't come back up
|
|
CSCwe51286
|
ASA/FTD may traceback and reload in Thread Name 'lina'
|
|
CSCwe51489
|
Unable to process query error on events; FMC UI; monetdb maximum
connections reached
|
|
CSCwe52120
|
SSL decrypted conns fails when tx chksum-offload is enabled with
the egress interface a pppoe.
|
|
CSCwe52499
|
NGIPSv syslog-tls.conf.tt needs filters removed when in CC
mode
|
|
CSCwe52640
|
Certain containers have extra gray borders and certain containers
are styled incorrectly
|
|
CSCwe54529
|
FTD on FPR2140 - Lina traceback and reload by TCP
normalization
|
|
CSCwe55556
|
logging is getting disabled if ssl rules are reordered
|
|
CSCwe58576
|
FTD:Node not joining cluster with "Health check detected that
control left cluster" due to SSL error
|
|
CSCwe58620
|
FMC 7.3 Connection Events page "Error: Unable to process this
query. Please contact support."
|
|
CSCwe58881
|
After FMC upgrade, SecureX ribbon redirects to US cloud region
regardless of the set cloud region
|
|
CSCwe59380
|
FTD: "timeout floating-conn" not operating as expected for
connections dependent on VRF routing
|
|
CSCwe59664
|
DAP policy created in FMC Gui, to detect a Windows OS with a
hotfix, will not work as expected
|
|
CSCwe59737
|
ASA/FTD reboots due to traceback pointing to watchdog timeout on
p3_tree_lookup
|
|
CSCwe59809
|
WR6, WR8, LTS18 and LTS21 commit id update in CCM layer (seq
45)
|
|
CSCwe59919
|
FTD Traceback and reload on Thread Name "NetSnmp Event mib
process"
|
|
CSCwe61599
|
FTD 2100 -Update daq-ioq mempool to help protect against buffer
corruption
|
|
CSCwe61928
|
PIM register packets are not sent to RP after a reload if FTD
uses a default gateway to reach the RP
|
|
CSCwe61969
|
ASA Multicontext 'management-only' interface attribute not synced
during creation
|
|
CSCwe62927
|
DCCSM session authorization failure cause multiple issues across
FMC
|
|
CSCwe62997
|
ASA/FTD traceback in snp_tracer_format_route
|
|
CSCwe63067
|
ASA/FTD may traceback and reload in Thread Name 'lina' due to due
to tcp intercept stat
|
|
CSCwe63232
|
ASA/FTD: Ensure flow-offload states within cluster are the
same
|
|
CSCwe63316
|
Pri-Active FMC NOT triggering registration TASK for FTD to
configure standby manager
|
|
CSCwe64404
|
ASA/FTD may traceback and reload after changing IP of
authentication server
|
|
CSCwe64542
|
TID python processes stuck at 100% CPU
|
|
CSCwe64557
|
ASA: Prevent SFR module configuration on unsuported platforms
|
|
CSCwe64563
|
The command "neighbor x.x.x.x ha-mode graceful-restart" removed
when deleting any created context
|
|
CSCwe65245
|
FP2100 series devices might use excessive memory if there is a
very high SNMP polling rate
|
|
CSCwe65634
|
ASA - Standby device may traceback and reload during
synchronization of ACL DAP
|
|
CSCwe66132
|
ASA/FTD may traceback and reload in Thread Name 'lina'
|
|
CSCwe66137
|
SSO user gets logged in to FMC UI if a valid local user
credentials are pre-populated in the browser
|
|
CSCwe67751
|
Last fragment from SIP IPv6 packets has MF equal to 1, flagging
that more packets are expected
|
|
CSCwe68159
|
Failover fover_trace.log file is flooding and gets overwritten
quickly
|
|
CSCwe69388
|
FMC should push the AnyConnect Custom attribute defer keyword as
lowercase instead of capitalized
|
|
CSCwe69833
|
IP addresses are susceptible to be skipped by geolocation rules
when using snort 3
|
|
CSCwe70202
|
Multiple times the failover may be disabled by wrongly seeing a
different "Mate operational mode".
|
|
CSCwe70558
|
FTD: unable to run any commands on CLISH prompt
|
|
CSCwe70721
|
Deployment is blocked due to Pre-deploy Validation Error -
Invalid endpoint
|
|
CSCwe71284
|
ASA/FTD may traceback and reload in Thread Name
DATAPATH-3-21853
|
|
CSCwe71672
|
Selective deployment negating the route configs
|
|
CSCwe71673
|
Selective deployment removing the prefilter-configs
|
|
CSCwe72535
|
Unable to login to FTD using external authentication
|
|
CSCwe73240
|
FMC runs out of space when Snort sends massive numbers of packet
logs
|
|
CSCwe74059
|
logrotate is not compressing files on 9.16 ASA or 7.0 FTD
|
|
CSCwe74328
|
AnyConnect - mobile devices are not able to connect when hostscan
is enabled
|
|
CSCwe74899
|
CD App Sync error is App Config Apply Failed on Secondary/Standby
after backup restore on RMA device
|
|
CSCwe74916
|
Interface remains DOWN in an Inline-set with propagate link
state
|
|
CSCwe75124
|
Upgraded FMC didn't mark FTD's with Hot Fix as light registered -
failed FMC HA sync
|
|
CSCwe75207
|
High rate of network map updates can cause large delays and
backlogs in event processing
|
|
CSCwe76036
|
ndclientd error message 'Local Disk is full' needs to provide
mount details which is full
|
|
CSCwe78977
|
ASA/FTD may traceback and reload in Thread Name
'pix_flash_config_thread'
|
|
CSCwe79072
|
ASA/FTD may traceback and reload in Thread Name 'lina'
|
|
CSCwe79954
|
LDAP External auth config fails to deploy to FTD if same LDAP
server is added as Primary and backup
|
|
CSCwe81684
|
ASA: Standby failure on parsing of "management-only" not reported
to parser/failover subsystem
|
|
CSCwe83061
|
FMC Upgrade from Active-Primary FMC is failed with "Installation
failed: Peer Discovery incomplete."
|
|
CSCwe83478
|
Prune target should account for the allocated memory from the
thread pruned
|
|
CSCwe83775
|
Incorrect CPU and core metrics collected on 55XX platform
|
|
CSCwe83812
|
SFDataCorrelator log spam when network map is full
|
|
CSCwe84079
|
asa_snmp.log is not rotated, resulting in large file size, QP-HA
MI 7.2.4-97
|
|
CSCwe85432
|
ASA/FTD traceback and reload on thread DATAPATH-14-11344 when SIP
inspection is enabled
|
|
CSCwe86687
|
Apache Commons FileUpload before 1.5 does not limit the number of
reques
|
|
CSCwe86690
|
In Apache MINA, a specifically crafted, malformed HTTP request
may cause
|
|
CSCwe86693
|
An issue in protobuf-java allowed the interleaving of
com.google.protobu
|
|
CSCwe88496
|
"Failed to convert snort 2 custom rules. Refer
/var/sf/htdocs/ips/snort.rej for more details."
|
|
CSCwe89024
|
FTS under AC Policy Listing page with 'obj' gives Error Moving
Data error with CTS DB
|
|
CSCwe89030
|
Serial number attribute from the subject DN of certificate should
be taken as the username
|
|
CSCwe89305
|
vFMC300 to FMC2600 migration failure with error "migration from R
to N is not allowed"
|
|
CSCwe89731
|
Notification Daemon false alarm of Service Down
|
|
CSCwe90202
|
ASA: Standby failure on parsing of "management-only" for dynamic
configuraiton changes
|
|
CSCwe90720
|
ASA Traceback and reload in parse thread due ha_msg
corruption
|
|
CSCwe91652
|
Database backup failed on KVM FMC
|
|
CSCwe91674
|
Mserver restarts frequently
|
|
CSCwe91958
|
correlation events based on connection events do not contain
Security Intelligence Category content
|
|
CSCwe92905
|
ngfwManager process continuously restarting leading to ZMQ Out of
Memory traceback
|
|
CSCwe93162
|
FP1140 7.0.4 Deployment keep failing with error "Can\'t use an
undefined value as a HASH reference"
|
|
CSCwe93202
|
FXOS REST API: Unable to create a keyring with type "ecdsa"
|
|
CSCwe93489
|
Threat-detection does not recognize exception objects with a
prefix in IPv6
|
|
CSCwe93532
|
ASA/FTD may traceback and reload in Thread Name 'lina'.
|
|
CSCwe93566
|
need to turn off default TLS 1.1 (deprecated) support for the FDM
GUI
|
|
CSCwe94287
|
FTD DHCP Relay drops NACK if multiple DHCP Servers are
configured
|
|
CSCwe95757
|
ASA/FTD may traceback and reload in Thread Name 'lina'
|
|
CSCwe96023
|
ASa/FTD: SNMP related traceback and reload immediately after
upgrade from 6.6.5 to 7.0.1
|
|
CSCwe96068
|
ASA: Configurable CLU for Large amount of under/overruns on CLU
RX/TX queues
|
|
CSCwe98430
|
AC policy deploy failing on 7.2.4 FMC to 6.7 FTD
|
|
CSCwe98435
|
Selective policy deploy with Identity Policy (captive-portal) and
SSL Policy (dp-tcp-proxy) CLI
|
|
CSCwe98751
|
FMC is suddenly not showing stack after creation.
|
|
CSCwe99040
|
traceback and reload thread datapath on process
tcpmod_proxy_continue_bp
|
|
CSCwe99550
|
Add knob to pause/resume file specific logging in asa log
infra.
|
|
CSCwf00803
|
Mode / License mismatch information is not seen in show failover
history
|
|
CSCwf02005
|
ActionQueue task sandbox data update throws SQL Error post 7.2.4
upgrade
|
|
CSCwf02363
|
Snort3 Crash in SslServiceDetector after call from
nss_passwd_lookup
|
|
CSCwf03490
|
portmanager.sh outputing continuous bash warnings to log
files
|
|
CSCwf04831
|
ASA/FTD may traceback and reload in Thread Name 'ci/console'
|
|
CSCwf06261
|
Health Monitoring exports negative snort swap memory metric
value
|
|
CSCwf06818
|
Cisco Firepower Threat Defense Software Encrypted Archive File
Policy Bypass Vulnerability
|
|
CSCwf07030
|
Upgrade Device listing page is taking more than 15 mins to load
page fully with 25 FTDs registered
|
|
CSCwf07791
|
ASA running out of SNMP PDU and SNMP VAR chunks
|
|
CSCwf08043
|
Lina traceback and reload due to fragmented packets
|
|
CSCwf10422
|
"Security Intelligence feed download failed" displayed even
though it succeeded
|
|
CSCwf12005
|
ASA sends OCSP request without user-agent and host
|
|
CSCwf12408
|
ASA: After upgrade to 9.16.4 all type-8 passwords are lost on
first reboot
|
|
CSCwf14735
|
traceback and reload in Process Name: lina related to Nat/Pat
|
|
CSCwf14811
|
TCP normalizer needs stats that show actions like packet
drops
|
|
CSCwf15858
|
LDAP authentication over SSL not working for users that send
large authorisation profiles
|
|
CSCwf15978
|
xml2js version 0.4.23 allows an external attacker to edit or add
new pro
|
|
CSCwf17814
|
ASA/FTD may traceback and reload in Thread Name '19', free block
checksum failure
|
|
CSCwf19562
|
Changes to lamplighter logs written to
/var/log/tid_process.log
|
|
CSCwf19853
|
FATAL errors in DBCheck due to missing columns in eventdb
table
|
|
CSCwf20338
|
ASA may traceback and reload in Thread Name 'DHCPv6 Relay'
|
|
CSCwf21106
|
ASA/FTD: Traceback on thread name: snmp_master_callback_thread
during SNMP and interface changes
|
|
CSCwf22568
|
FTD HA Creation fails resulting in devices showing up in an
inconsistent state on the FMC
|
|
CSCwf23564
|
Unable to establish BGP when using MD5 authentication over GRE
TUNNEL and FTD as passthrough device
|
|
CSCwf24124
|
SFDataCorrelator process crashing very frequently on the FMC.
|
|
CSCwf24773
|
crashhandler running with test mode snort
|
|
CSCwf26939
|
FTD may fail to create a NAT rule with error: "IPv4 dst real obj
address range is huge"
|
|
CSCwf28488
|
Inconsistent log messages seen when emblem is configured and
buffer logging is set to debug
|
|
CSCwf28592
|
In some specific scenarios, object optimizer can cause incorrect
rules to be deployed to the device
|
|
CSCwf30716
|
ASA in multi context shows standby device in failed stated even
after MIO HB recovery.
|
|
CSCwf30727
|
ASA integration with umbrella does not work without
validation-usage ssl-server.
|
|
CSCwf31701
|
ASA traceback and reload with the Thread name: **CP Crypto Result
Processing**
|
|
CSCwf31820
|
Firewall may drop packets when routing between global or user
VRFs
|
|
CSCwf32890
|
Standby FMC SSH connection getting disconnected frequently.
|
|
CSCwf33574
|
ASA access-list entries have the same hash after upgrade
|
|
CSCwf34450
|
Snort3 crash after the consequent snort restart if duplicate
custom apps are present
|
|
CSCwf35510
|
Possible segfault in snort3 when appid tries to delete the app
info table
|
|
CSCwf42144
|
ASA/FTD may traceback and reload citing process name "lina"
|
|
CSCwf43288
|
Traceback in Thread Name: ssh/client in a clustered setup
|
|
CSCwf51933
|
FTD username with dot fails AAA-RADIUS external authentication
login after upgrade
|
|
CSCwf57261
|
ASA: Traceback and reload due to clientless webvpn session
closure
|
|
CSCwf57850
|
TelemetryApp process keeps exiting every minute after upgrading
the FMC
|
|
CSCwf58876
|
KP2140-HA, reloaded primary unit not able to detect the peer
unit
|
|
CSCwf76945
|
Packet data is still dropped after upgrade
|
Feedback