SSL Visibility running on ISG shows "INVALID" error in user interface Dashboard where the interfaces are pictured.

Products

• ISG SSLV

Issue/Introduction

When deploying a SSL Visibility as an ISG virtual application, after logging into the SSLv application, the Dashboard shows that the interfaces are "INVALID".  When reviewing the box, looking at the Hostname -> Information page, you may also note that the Network Card Info shows an incorrect model for the installed interfaces.

Environment

SSL Visibility version 5.5.1.1 software running as an ISG virtual application on a SSP host appliance running ISG 2.5.3.1 or later.

Cause

The reason for this state is that there is an issue with the ISG network definition.  SSLv requires its own network definition.  The SSLv network definition should consist of one "mode shared" management interface.  Additional interfaces will then need to be added to the network definition as "mode passthrough".  For example:

(config)#network-definition
(config-network-definition)#create my-sv-network
(config-network-definition)#edit my-sv-network add mode shared interfaces 0:0
(config-network-definition)#edit my-sv-network add mode passthrough interfaces [1:0 1:1 2:0 2:1]
(config-network-definition)#exit

The network definition will then need to be assigned to the SSLv application.

(config)#applications edit my-sv-app network-definition my-sv-network

For additional information reference the following documentation, Initial Setup for SSL Visibility Virtual Applications.

 

Resolution

To correct this error take the following steps.

1. Stop the SSLv application.
2. Edit the network definition appropriately.
3. Edit the application to use the newly edited network definition.
4. Restart the application.

Additional Information

If you run into additional issues, please reach out to support.