| Message Code | ASA-3-420001 |
| Severity | Error |
| Description | IPS card not up and fail-close mode used, dropping ICMP packet ifc_in:SIP to ifc_out:DIP (typeICMP_TYPE, code ICMP_CODE) %ASA-3-420001 : IPS card not up and fail-close mode used, dropping TCP packet from ifc_in:SIP/SPORT to ifc_out:DIP/DPORT\n %ASA-3-420001 : IPS card not up and fail-close mode used, dropping UDP packet from ifc_in:SIP/SPORT to ifc_out:DIP/DPORT\n %ASA-3-420001 : IPS card not up and fail-close mode used, dropping protocol protocol packet from ifc_in:SIP to ifc_out:DIP\n |
| Explanation | This message is displayed when packets are dropped when IPS fail-close mode is used and the IPS card is not up. This message is rate limited. ifc_in—Input interface name ifc_out—Output interface name SIP—Source IP of the packet SPORT —Source port of the packet DIP—Destination IP of the packet DPORT —Destination port of the packet ICMP_TYPE—Type of the ICMP packet ICMP_CODE—Code of the ICMP packet |
| User Action | Check and bring up the IPS card. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.