A user needs to automate or schedule the command "vpn-sessiondb logoff all" to run once per week on a CSF-1240 running the ASA software. The requirement is to have this VPN session cleanup command execute automatically on a weekly basis without manual intervention.
Secure Firewall CSF-1240. Other platforms can be also affected.
ASA multi-context mode configuration.
The Embedded Event Manager (EEM) is not supported in multi-context mode. This limitation prevents the scheduling or automation of commands using EEM scripting capabilities.
Alternative approaches for VPN session management would need to be considered, such as:
Manual execution of the command on a weekly basis.
External automation tools that can connect to the device and execute commands via SSH or HTTP.
The Embedded Event Manager (EEM) feature is not supported when the Secure Firewall is operating in multi-context mode. EEM is the primary mechanism for scheduling and automating command execution on ASA platforms, but this functionality is disabled in multi-context configurations, preventing the automation of any command.
Related enhancement request: Cisco bug ID CSCwn84756 (ENH: ASA multiple context mode EEM support).
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
14-May-2026
|
Initial Release |