topic Re: FMC - URL Filtering download failure in Network Security

FMC - URL Filtering download failure

pnavratil — Tue, 28 Jan 2020 09:55:14 GMT

Customer produce FMC v.6.4.0.7.

There are 2 devices connected -

first - HA bundle of 2 FPR2130 (FTD) - License: Base, Threat, AC Plus

second - ASA5515 (FTD image) - License Base

The FMC reported error

URL Filtering Monitor - URL Filtering Download Failure

As there is no URL license used - I checked several other discussion and tried to turn on and off the URL Filtering license (on both deviceses)

The alarm had gone, but after few days the alarm is back again.

Can somebody advice how to solve this? (Some other way then turn off the alarm in Health Policy)

Regards

Pavel

Re: FMC - URL Filtering download failure

curdubanbogdan — Tue, 28 Jan 2020 11:28:53 GMT

Does your ftd has access to the internet? Can you try and ping google for example? It can be a DNS problem, a NAT problem, or a network configuration problem for your ftd.

Re: FMC - URL Filtering download failure

balaji.bandi — Tue, 28 Jan 2020 13:43:19 GMT

Worth try the cisco update server from command level ( Telenet ciscosite port ) make sure you are going right interface out and see any blockers ?

Re: FMC - URL Filtering download failure

pnavratil — Thu, 30 Jan 2020 19:53:46 GMT

Hi - the error is reported on device Firepower Management Center so I expect the initiator is FMC itself - or is it made by FTD devices?

On FMC - there is no problem with downloading updates and so on - so it does not seem as problem with connection or DNS.

For sure I tested ping form FTDs too - no problem with accessing the internet and with DNS translations.

Regards

Re: FMC - URL Filtering download failure

pnavratil — Fri, 31 Jan 2020 10:03:02 GMT

I just check this - no problem with it:

----------

root@fpmc1:/Volume/home/admin# telnet support.sourcefire.com 80
Trying 50.16.210.129...
Connected to support.sourcefire.com.
Escape character is '^]'.

---------

Regards

Pavel

Re: FMC - URL Filtering download failure

balaji.bandi — Sat, 01 Feb 2020 12:41:46 GMT

check any space issue or else open the TAC case for support.

Re: FMC - URL Filtering download failure

SIMMN — Mon, 20 Apr 2020 19:21:21 GMT

Wonder if you have this solved? Have similiar issue on FMC 6.4.0.1.

Re: FMC - URL Filtering download failure

CameronJohns- — Tue, 09 Jun 2020 17:59:29 GMT

@SIMMN If you or anybody is still having issues with this error, the solution that worked for me is as follows:

>expert

administrator@FMC: ~$

Issue the "sudo su" command and re-enter administrator password

Once you're root, back up and then modify /etc/sf/bca.cfg

Use vim to modify

Change the BcapPort variable from 80 to 2316

Original -> BcapPort=80

Updated -> BcapPort=2316

Save the file

Once you modify the file, issue the following commands:

pmtool restartbyid SFDataCorrelator

pmtool restartbyid CloudAgent

Re: FMC - URL Filtering download failure

SIMMN — Tue, 09 Jun 2020 18:47:38 GMT

Thanks!

My issue turned out to be a URL rule (more specific blocking uncategorized URL) in the ACP blocks the communication with feed URL... So it was a chicken-egg issue after FMC lost communication with the Feed...

Re: FMC - URL Filtering download failure

pzkqx6000 — Wed, 26 Jan 2022 08:15:05 GMT

that worked for me. Thanks!