Symptom
Not able to add more or replace an existing AnyConnect or HostScan image.
ciscoasa(config-webvpn)# anyconnect image...
WARNING: Unable to install imageWARNING: Unable to remove image
ciscoasa(config-webvpn)#
A new image was not installed, however, some memory was consumed:
Before:
ciscoasa(config-webvpn)# sh mem
Free memory: 504614912 bytes (23%)
Used memory: 1642868736 bytes (77%)
------------- ------------------
Total memory: 2147483648 bytes (100%)
After:
ciscoasa(config-webvpn)# sh mem
Free memory: 437297152 bytes (20%)
Used memory: 1710186496 bytes (80%)
------------- ------------------
Total memory: 2147483648 bytes (100%)
Conditions
A firewall used for remote access with AnyConnect images configured. The issue may be also see with HostScan images.
The reason why new images cannot be added is a low amount of available memory.
Workaround
Remove currently unused, but configured AnyConnect and/or HostScan images (show webvpn), so that a new image can be configured.
Reboot a firewall to free incorrectly taken memory.
Further Problem Description
Please note that the reason why an image could not be installed, a low memory, is valid in this case. The bug fix addresses the issue with the increased memory consumption even though a new image configuration was rejected.