Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Software complainace is not working for Cisco ASA firewalls #299

Open
anburhce opened this issue Mar 11, 2024 · 13 comments
Open

Software complainace is not working for Cisco ASA firewalls #299

anburhce opened this issue Mar 11, 2024 · 13 comments

Comments

@anburhce
Copy link

Hi Team,

Need your help to update the ASA firewall driver , as software compliance is not working for these below mentioned ASA firewall families .

Cisco ASA 5525
Cisco ASA 5545
Cisco ASA 5585.

Kinldy do let me now if you need any more details.

@SCadilhac
Copy link
Contributor

Hi, can you run the snapshot in full debug mode (https://github.com/netfishers-onl/Netshot/wiki/Snapshot-troubleshooting) and share the result so that I can update the driver?

@anburhce
Copy link
Author

Dear Friend,

This is the actual issue. It is not checking the software compliance. Hardware and conf backup and is working fine.

image

And i tried to run Debug snapshot but not seeing the "Enable debug log"

image

Am using [Netshot 0.19.3] version in my Environment.

@SCadilhac
Copy link
Contributor

What software rules have you defined in the Compliance section?

@anburhce
Copy link
Author

anburhce commented Apr 1, 2024

Family and version details are here
image

part number details are here

image

Software compliance added details

image

image

And finally when i run it getting this error.

image

under reports tab i see all the devices are non-complaint

image

@SCadilhac
Copy link
Contributor

Weird. I would suspect a hidden space or something similar...
You may want to clear the Device Family and Part Number fields in the compliance rule and try again. If not better, can you double check (API) that the version doesn't contain any space or other unexpected character?

@anburhce
Copy link
Author

anburhce commented Apr 3, 2024

It is failing because of version only. if i remove version on the compliance tab

image
image

I tried it with and without space , but still no luck.

How do we solve this issue ?

@SCadilhac
Copy link
Contributor

SCadilhac commented Apr 14, 2024

Can you use the API to check the detected version of the device?
Go to Help > API browser.
Find GET /devices/{id}, expand the section, click Try it out, give the device ID, and click Execute. Check softwareVersion entry in the resulting JSON.

@anburhce
Copy link
Author

Hi Friend,

image

netshot - PA.txt

@anburhce
Copy link
Author

Hi Scadilhac,

Kindly help.

@SCadilhac
Copy link
Contributor

You are sharing an example from the API doc, not the query result as requested.
You should have real values in the result, not values like "string".

@anburhce
Copy link
Author

Hi Scadilhac,

Kindly check now .

image

@SCadilhac
Copy link
Contributor

OK, so there is a space character at the end of the software version.
I've updated the driver file, you can update (or you can the space to your rule, to check).

@anburhce
Copy link
Author

Hi Scadilhac,

Can you provide the stpes to update only the driver?
Also share me the driver filename which you have updated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants