Symptom

If a network module is administratively disabled by the user, the Firewall Management Center (FMC) shows a critical alarm in the Health tab: Hardware Alarm: /sys/switch/slot/2: network module Offline Administrative shutdown is a deliberate and intentional manual user configuration. This is not an indication of a problematic state. According to the Health Monitor Status Categories in https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/720/management-center-admin-72/health-health.html#ID-2227-000004a9, the critical state indicates "that the critical limits have been exceeded for at least one health module on the appliance and the problem has not been corrected.".

Conditions

First observed when all conditions below matched: - Secure Firewall 3100 with Firepower Threat Defense (FTD). - A network module is installed in slot 2 and administratively disabled by the user in the Interfaces tab of the Chassis Operations Page (Devices > [device] > click Manage in the Chassis column).

Workaround

One possible option is to enable health module level exclusion for the Hardware Alarms as described in https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/management-center/admin/720/management-center-admin-72/health-health.html#ID-2227-000004a9 When enabled, this option disables alerting for ALL hardware alarms.

Further Problem Description