topic When I try to configure the in Network Security

fail to register SFR module

Michael ONeil — Tue, 12 Mar 2019 12:35:26 GMT

I am failing to register my ASA with Sourcefire module. I see in the V DC that the syslog says it connected to the module successfully, but fails to authenticate

“sftunneld:sf_ssl [WARN] VerifyConnect:Failed to authenticate or to be authenticated by peer”

Verify that the key being

Brian Clarke — Wed, 01 Oct 2014 13:33:12 GMT

Verify that the key being used to configure the manager on the SFR module and the key entered when registering the SFR Module as a Device in Defense Center are the same.

When I try to configure the

Michael Antonakis — Fri, 14 Nov 2014 12:51:22 GMT

When I try to configure the manager on the ASA SFR, it returns the following error:

"Communication channel for management interface is not configured!"

Hi Michael, Did you figure

jchorlton — Fri, 23 Jan 2015 16:53:50 GMT

Hi Michael,

Did you figure this one out?

I get exactly the same on my ASA SFR.

"Communication channel for management interface is not configured!"

Thanks

John

Hello Jonh,Did you resolve

Oleg Tsoy — Wed, 28 Jan 2015 04:06:02 GMT

Hello Jonh,

Did you resolve that problem?
I have the same syslog message.

Dear all, I had to open a TAC

Michael Antonakis — Wed, 28 Jan 2015 11:37:32 GMT

Dear all,

I had to open a TAC about this. The problem was that, after a forced power reload of the ASAs, a file "sftunnel.conf" got corrupted. It seems that this file is responsible for the the communication service between the Manager and the SFR. If the service is down then the SFR does not listen on TCP/8305. So the TAC engineer stopped the service, deleted the corrupted file, recreated it and restarted the service. All these from the expert CLI mode of the SFR.

Thanks a lot for information

Oleg Tsoy — Wed, 28 Jan 2015 12:18:04 GMT

Thanks a lot for information Michael.

Do you remember the process to recreate that file?

Hello Oleg, I logged the TAC

Michael Antonakis — Wed, 28 Jan 2015 13:02:51 GMT

Hello Oleg,

I logged the TAC engineer's session so here it is (see attached tac_session_log.txt). Though, you will need the root password to be able to perform what he did.

He sent me the text file sftunnel.conf (included in sftunnel.zip), browsed in /etc/sf/ and created the file named sftunnel.conf with vi editor, where he copy-pasted the text from the file he had sent me.

I hope that helps.

Great. It's working!)I had

Oleg Tsoy — Wed, 28 Jan 2015 13:10:14 GMT

Great.

It's working!)

I had exactly the same issue.

Thanks a lot.

It did not worked for me. I

michalis1234 — Sat, 07 Feb 2015 08:17:51 GMT

It did not worked for me. I get access denied at on one point of the process. If i reimage the module, will that help? Or i will have yhe same issue?

I re-imaged my module after

jchorlton — Sat, 07 Feb 2015 12:36:35 GMT

I re-imaged my module after suffering this problem and afterwards it worked perfectly.

I will do that as well, on

michalis1234 — Sat, 07 Feb 2015 17:24:11 GMT

I will do that as well, on Monday and let you know of the results!

Hello.Can anyone try to deny

Oleg Tsoy — Sat, 07 Feb 2015 17:35:34 GMT

Hello.

Can anyone try to deny youtube.com by using sfr?

I did such test that fail for me because it's not blocking when I try to access site using Internet Explorer.

You are rigth!!!!it is

michalis1234 — Mon, 09 Feb 2015 18:12:09 GMT

You are rigth!!!!

it is working now as well!!!

This fixed my problem.

Rob Tyrrell — Thu, 11 Jun 2015 18:50:18 GMT

This fixed my problem. Straight up awesome! Thanks!

Had the same issue. Followed

Saad Mohammad — Tue, 28 Jul 2015 20:07:40 GMT

Had the same issue. Followed the instructions on how to edit in VI then pasted the attached sftunnel.conf and saved. Module registered instantly.

Thanks