topic Re: No APJC cloud option when adding AMP cloud connection in Network Security

No APJC cloud option when adding AMP cloud connection

Trivela — Tue, 12 Mar 2019 14:03:47 GMT

Hello

I'm having problem when adding connection to AMP cloud from my FMC. When i read from cisco documents, it said that i should have option like: US, Europe and APJC, but on my FMC i only have 'Private Cloud' option. I believe this happened because FMC need access to the internet, but i have allowed any destination for FMC to access the internet from our Bluecoat proxy. Did anyone ever have this issue? I have uploaded the picture of the option in this discussion. Any help's appreciated. Thank you

Re: No APJC cloud option when adding AMP cloud connection

Marvin Rhoads — Thu, 01 Nov 2018 10:06:36 GMT

Have you told your FMC that there is a proxy inline? (System > Management Interfaces > Proxy. Enable and configure it.)

It definitely works without a proxy. I double checked mine just now:

Re: No APJC cloud option when adding AMP cloud connection

Trivela — Thu, 01 Nov 2018 10:19:54 GMT

Yes, i have enabled the proxy configuration, but still there's only 'private cloud' option on it. I also tried removing the proxy configuration temporarily, but FMC still unable to find the AMP cloud connection. Fyi, my FMC is able to resolve api.amp.sourcefire.com DNS

Re: No APJC cloud option when adding AMP cloud connection

Marvin Rhoads — Thu, 01 Nov 2018 10:23:53 GMT

OK, that's a good start.

Have you tried using curl or checking the httpds_error_log as described in these documents:

https://www.cisco.com/c/en/us/support/docs/security/sourcefire-fireamp-private-cloud-virtual-appliance/118290-technote-fireamp-00.html#anc10

https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/117997-technote-firesight-00.html#anc6

Re: No APJC cloud option when adding AMP cloud connection

Trivela — Fri, 02 Nov 2018 03:10:51 GMT

As i wrote on a post before this. My FMC was able to resolve api.amp.sourcefire.com and i didn't see any httpsd_error_log from the output of this 'tail -f /var/log/httpd/httpsd_error_log' command. Thank you for your reply Marvin

Re: No APJC cloud option when adding AMP cloud connection

Marvin Rhoads — Fri, 02 Nov 2018 03:46:49 GMT

Right - I saw where you confirmed the DNS resolution. curl will test whether you can actually reach the site via https.

Re: No APJC cloud option when adding AMP cloud connection

Trivela — Sun, 04 Nov 2018 13:22:50 GMT

I've successfully integrated my FMC with AMP cloud. It was the proxy authentication, i didn't setup username & password before. After i added proxy authentication, APJC, US and Europe cloud options was shown on FMC.