Other Troubleshooting Tools - Cisco FirePOWER ASA 5500 series Configuration Manual

Other Troubleshooting Tools

erasure prevents you from recovering a password. However, disabling password recovery prevents
unauthorized users from viewing the configuration or inserting different passwords. In this case, to
recover the system to an operating state, load a new image and a backup configuration file, if available.
Other Troubleshooting Tools
The security appliance provides other troubleshooting tools to be used in conjunction with Cisco TAC:
•
•
•
Viewing Debug Messages
Because debugging output is assigned high priority in the CPU process, it can render the system
unusable. For this reason, use debug commands only to troubleshoot specific problems or during
troubleshooting sessions with Cisco TAC. Moreover, it is best to use debug commands during periods
of lower network traffic and fewer users. Debugging during these periods decreases the likelihood that
increased debug command processing overhead will affect system use. To enable debug messages, see
the debug commands in the Cisco Security Appliance Command Reference.
Capturing Packets
Capturing packets is sometimes useful when troubleshooting connectivity problems or monitoring
suspicious activity. We recommend contacting Cisco TAC if you want to use the packet capture feature.
See the capture command in the Cisco Security Appliance Command Reference.
Viewing the Crash Dump
If the security appliance crashes, you can view the crash dump information. We recommend contacting
Cisco TAC if you want to interpret the crash dump. See the show crashdump command in the Cisco
Security Appliance Command Reference.
Common Problems
This section describes common problems with the security appliance, and how you might resolve them.
Cisco Security Appliance Command Line Configuration Guide
43-10
Viewing Debug Messages, page 43-10
Capturing Packets, page 43-10
Viewing the Crash Dump, page 43-10
Chapter 43 Troubleshooting the Security Appliance
OL-10088-01