False "PRIMARY UNIT IS NOW STANDBY" alarm in Spectrum
search cancel

False "PRIMARY UNIT IS NOW STANDBY" alarm in Spectrum


Article ID: 98202


Updated On:


CA Spectrum


Spectrum supports the Active/Standby mode for Cisco ASA Firewall device Failover Scenario which means that Primary Firewall is Active, whereas the Firewall in Secondary mode is Standby.

When Primary Firewall is active and Secondary Firewall is standby, there is a "PRIMARY UNIT IS NOW STANDBY" alarm raised on Primary firewall. However, there isn't any fail over occurred from Primary to Secondary Firewall.




Basically Spectrum polls the following OIDs to check the hardware status of Cisco ASA devices.

cfwHardwareInformation 0x211600 
cfwHardwareStatusDetail 0x211602 
cfwHardwareStatusValue 0x211601 

You can find these OIDs from Locator--> Application models-->Search for "CiscoFirewallApp". You should be able to find CiscoFirewallApp application model for both Primary and Secondary ASA Firewall.

Below is a scenario to raise this "PRIMARY UNIT IS NOW STANDBY" alarm.



This means Primary unit is standby and Secondary unit is active. Once Spectrum defects Secondary is active and Primary is standby, a "PRIMARY UNIT IS NOW STANDBY" alarm would be inserted to the Primary Unit.