topic Hi, in Network Security

No Access Control Policy-Stuck Sensor

sholloway11 — Tue, 12 Mar 2019 13:13:16 GMT

Hello All,

I am attempting to upgrade an virtual device sensor that is stuck on 5.2.07. When I apply the update patch nothing happens. I notice in DC the sensor does not have Access Control Policy assigned and I believe that is the issue. Does anyone have an answers?

Thanks, 🙂

Hi,

Pujita Patni — Tue, 13 Dec 2016 18:11:07 GMT

Hi,

You are correct in saying that Access Control Policy needs to be pushed before upgrading a sensor. You will need to look at the logs to understand where exactly the upgrade fails.

Do you see the upgraded getting kicked off ?

You can tail -f /var/log/action_queue.log on the FMC and the sensor.

If you see it fail at a certain % then you need to see the logs on the sensor.

cd /var/log/sf/<upgrade file name>

less status.log

Thanks,

Pujita Patni

Thanks, Pujita,

sholloway11 — Tue, 13 Dec 2016 19:11:03 GMT

Thanks, Pujita,

I checked the status log. It looks like the last patch never applied or launch. Should I remove an temp files?

Thanks,

Also, Can I remove the

sholloway11 — Tue, 13 Dec 2016 19:12:07 GMT

Also, Can I remove the virtual device from FC and add bad to get the AP to apply?

Hi,

Pujita Patni — Wed, 14 Dec 2016 22:23:06 GMT

Hi,

I would suggest, you try to push the update again and tail -f /var/log/action_queue.log on both the FMC and the sensor.

The logs should indicate what the problem is.

You can share it with me and I can go over it.

Thanks,

Pujita