topic Re: FMC Backup and Copy Failing in Network Security

FMC Backup and Copy Failing

mumbles202 — Thu, 16 Apr 2020 22:41:03 GMT

I have an FMC running 6.5.0.4 that I can't get to copy to a remote server when the backup completes. I've tried a Windows server running Solarwinds as well a Ubuntu server using Openssh. I've tried confirmed I can ssh from the FMC directly to the server and I added the FMC key to the Ubuntu authorized_keys file as well just to be sure but still having issues w/ the copy. I can manually connect to the FMC and download the file but the plan was to get the copy to an offsite server to be done automatically.

Re: FMC Backup and Copy Failing

Francesco Molino — Fri, 17 Apr 2020 03:13:44 GMT

Can you share the screenshot of what you configured on fmc backup?

Stupid and obvious question: have you validated if FMC user you type in has the right to write data on the remote path?

When you download the file manually, are you doing towards the same remote path?

Can you connect to your FMC using CLI and go to expert mode. Then try to ssh your remote server to validate connectivity.

Also from expert mode, can you run the command cat /var/log/backup.log | grep x.x.x.x

--> Replace x.x.x.x by the name or IP of your remote SSH

Re: FMC Backup and Copy Failing

mumbles202 — Fri, 17 Apr 2020 13:37:56 GMT

Thanks for the reply. I created a single user on the Ubuntu server and I can connect to the server using WinSCP and make a directory and copy files to it. I also confirmed from the FMC I'm able to connect to the Ubuntu server via ssh and login.

I'm trying to save the files a folder in the in the home directory of the user. I've also tried just / as the path and /folder/ as well.

I setup a test server to replicate and I'm getting this in the logs:

admin@firepower:~$ cat /var/log/backup.log | grep 10.110.25.154
'-stacktrace' => 'Problem performing scp: The authenticity of host \'10.110.25.154 (10.110.25.154)\' can\'t be established.
'-text' => 'Problem performing scp: The authenticity of host \'10.110.25.154 (10.110.25.154)\' can\'t be established.

I connected via sshfrom the FMC, allowed the key but had the same issue.

Re: FMC Backup and Copy Failing

mumbles202 — Fri, 17 Apr 2020 15:12:02 GMT

So I was able to fix my error on the test system (I added the device as remote storage so the key would be imported, then changed back to local storage). After that backups completed and copied w/o an issue. On the production box however I'm not even getting anything in the log for the backup device.

Re: FMC Backup and Copy Failing

mumbles202 — Fri, 17 Apr 2020 20:29:41 GMT

While I wasn't getting any errors in the production system log I thought I'd give the same procedure a try and it worked there as well.

Re: FMC Backup and Copy Failing

Francesco Molino — Sat, 18 Apr 2020 02:05:25 GMT

so now it works or still having issues?

Re: FMC Backup and Copy Failing

mumbles202 — Fri, 24 Apr 2020 19:55:35 GMT

It's currently working properly since I made that change and imported the key successfully.

Re: FMC Backup and Copy Failing

Francesco Molino — Sat, 25 Apr 2020 02:05:42 GMT

Glad to know.
Don't forget to rate and mark as correct answer if my answer helped you.