topic Re: CAN NOT ADD MY FTD IN MY FMC in Network Security

CAN NOT ADD MY FTD IN MY FMC

CSCO12674262 — Sun, 24 Jan 2021 12:08:42 GMT

hi,

i used ftd in version 6.2.3.7 AND MY FMC SERVER IN 6.2.3.16

i have this message when i add my ftd in my fmc i use this cimmande "configure manager add X.X.X.X pass

"getPeersByRole: unable to connect to db at /ngfw/usr/local/sf/lib/perl/5.10.1/SF/PeerManager/Peers.pm line 226. Unable to access DetectionEngine::bulkLoad"

how i can resolve this issu

thanks

Re: CAN NOT ADD MY FTD IN MY FMC

balaji.bandi — Sun, 24 Jan 2021 12:16:27 GMT

Are the new Devices?

1. do you have reachability between FMC and FTD?

2. what is the IP address of FMC and FTD?

3. Do you have any Firewalls in between?

from FTD

> show network

Re: CAN NOT ADD MY FTD IN MY FMC

CSCO12674262 — Sun, 24 Jan 2021 14:25:13 GMT

yes i have rechability betwwen fmc and ftd because another i access to ftd with ssh and another FTD was add in FMC and i dont have firewall betwwen us

Re: CAN NOT ADD MY FTD IN MY FMC

balaji.bandi — Sun, 24 Jan 2021 14:34:20 GMT

i am sure this is not online and live, reboot FTD give some time 15-20min, and try adding?

Re: CAN NOT ADD MY FTD IN MY FMC

CSCO12674262 — Sun, 24 Jan 2021 14:37:40 GMT

hi,

i try to reboot FTD but is the same thing

Thanks

Re: CAN NOT ADD MY FTD IN MY FMC

Marvin Rhoads — Sun, 24 Jan 2021 14:38:42 GMT

There are a couple of bugs that can cause this problem:

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvc77158/?rfs=iqvred

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvn67084/?rfs=iqvred

If you don't have anything configured on the module, it is easiest to just re-image it and re-add to FMC.

If that's not an option, then TAC may be able to assist by working with you one-on-one to recover some system files to make it work,

Re: CAN NOT ADD MY FTD IN MY FMC

CSCO12674262 — Sun, 24 Jan 2021 14:49:51 GMT

thanks,

but I have firewalls which are far away so I have to repatriate them to fix this there are no other methods to fix this

Re: CAN NOT ADD MY FTD IN MY FMC

Marvin Rhoads — Mon, 25 Jan 2021 08:39:51 GMT

@CSCO12674262 as I mentioned earlier, Cisco TAC may be able to find a work around fix short of reimaging the entire module.

Re: CAN NOT ADD MY FTD IN MY FMC

balaji.bandi — Mon, 25 Jan 2021 11:10:48 GMT

suggest to open a TAC case, they can get in to root access and make fix for you.

Re: CAN NOT ADD MY FTD IN MY FMC

CSCO12674262 — Mon, 25 Jan 2021 12:55:48 GMT

Thank you very much for your answer

but assure me that the support will find another solution to force the FTD to connect to the FMC without reimaging the firepower since the firewalls are deployed far from the central site

Re: CAN NOT ADD MY FTD IN MY FMC

Marius Gunnerud — Mon, 25 Jan 2021 19:48:37 GMT

There is no way to give this assurance as the issue might be hardware related and you might have to replace the FTD. But you will not find out until TAC has had a look.

Another option you could look into is having someone onsite connect to the console port of the FTD that way you have access to the device and can check the connectivity from there also.