Operational Defect Database
BugZero updated this defect 42 days ago.
Data sources
All data on this page is proprietary to BugZero® or gathered from public sources
VMware | 375179
Smarts IP: Receive Interface down notifications for IKE Tunnels on ASA used as VPN concentrator
Last update date:
4/16/2024
Affected products:
Smart Assurance - SMARTS
Affected releases:
No affected releases provided.
Fixed releases:
No fixed releases provided.
Description:
Symptoms
Receive Interface down notifications in Smarts IP for IKE Tunnels on ASA used as VPN concentrator
Cause
When Smarts discovers an ASA firewall, it discovers the IPSec connections that are currently active on the firewall as interfaces and starts to monitor them. When the ASA is being used as a VPN concentrator, the connection is dynamic. When a user disconnects from their VPN session, the IPSec tunnel is torn down. Smarts seeing this interface as being gone during polling and cuts a ticket for the interface being down.
Resolution
Smarts IP Manager is behaving as designed. However, the following sections present two options to prevent an interface down from being generated in this condition. Unmanage the interfaceYou can do this in either of the following ways: Right-click and select "Unmanage"Create a custom ASL file to unmanage the interfaces. Do not create the interfaceYou can prevent an interface from being created. See 10571 for more information on how to do this.
