topic Re: FTD Backups sent to FTP Server is Failing in Endpoint Security

FTD Backups sent to FTP Server is Failing

watson.james796@gmail.com — Fri, 20 Jun 2025 14:02:24 GMT

Good morning Team!

I have been tasked to investigate, why our FTD Firewall backups are failing to be sent to out FTP server;

the local backups on the FTDs are working. Is there a way to view the failure logs of the FTDs using the FMC?

Any advise would be greatly appreciated, thanks in advance!

- James Watson

Re: FTD Backups sent to FTP Server is Failing

MHM Cisco World — Fri, 20 Jun 2025 16:19:15 GMT

Did you do right steps

from fmc
System > Tools > Backup / Restore

MHM

Re: FTD Backups sent to FTP Server is Failing

watson.james796@gmail.com — Mon, 23 Jun 2025 13:47:52 GMT

Thanks for your help MHM!

I located the Managed Device Backup section on our FMC:

Does the Storage Location: /var/sf/remote-backup/ path mean that the Firewalls listed backups

will be stored there?

Re: FTD Backups sent to FTP Server is Failing

MHM Cisco World — Mon, 23 Jun 2025 14:43:08 GMT

For ftd mgmt by fmc

1-We can backup directly to fmc ""/var/sf/remote-backup/""

2- Or backup to remote NFS storage

https://www.cisco.com/c/en/us/support/docs/security/secure-firewall-management-center/221080-configure-remote-backup-for-fmc-using-nf.html

MHM

Re: FTD Backups sent to FTP Server is Failing

watson.james796@gmail.com — Mon, 23 Jun 2025 15:19:35 GMT

Thanks again MHM!

With your help, I think I may have stumbled across an interesting finding.

When snooping around in the FMC "System/Configuration" section, I was able to confirm the FMC to FTP server

connections are good, by running the quick test; However, I noticed that the "Directory Field" is empty this should include

the path to the storage folder on the FTP server, I also noticed that the "Use for backups" box isn't checked.

Re: FTD Backups sent to FTP Server is Failing

Aref Alsouqi — Mon, 23 Jun 2025 16:02:08 GMT

How did you configure the FMC to send the backup files to an FTP server?! maybe you meant to say SFTP? As far as I know the protocols supported for the remote backup from the FMC are SSH, SMB, and NFS. SFTP will also be supported because it used SSH port. Assuming you have an SFTP server, then the directory field must be specified, however, it would work just fine if you set the "/" because that will depend on the permissions and the landing directory configured on the SFTP server for the user "ServiceFMC". Also, the "Use for backups" tickbox has to be enabled. I'm not sure if the "test" button you see in the backup profile page does actually a complete test or only a L3 check. One thing might cause the backup to fail would be the write permissions on the SFTP server folders which is quite common, so, please check that the "ServiceFMC" user has all the permissions it needs to the root folder (as configured with the /) or specifiy the custom folder in the FMC backup profile for the user "ServiceFMC" instead of the "/".

Re: FTD Backups sent to FTP Server is Failing

watson.james796@gmail.com — Tue, 24 Jun 2025 20:09:24 GMT

Thanks again for the help everyone!

@Aref Looks like its a folder permission issue as you have stated, we are working on granting the proper write permissions

to the "serviceFMC" account. BTW yes, we are using a SFTP server LOL!

I will keep you all posted. Awesome help!!

-James Watson