topic Re: connecting FTD with FMC in Network Security

connecting FTD with FMC

nsr88nsr69225 — Thu, 25 Nov 2021 16:50:55 GMT

Hello guys,

I am following an online course with FTD and FMC. when I try to add my FTD to FMC I get en error

Could not establish connection with Device
Possible reasons could be:-

- Time on FMC and Device are not in sync. Make sure NTP is configured on both.
- There might be an IPS device between FMC/Device which might be blocking SSL connectivity between the two. Remove any rule in the IPS device which is blocking SSL connectivity.
- Device and FMC are not listening on same sftunnel Port. Current sftunnel port configured on FMC is 8305, please ensure Device is also using the same port.

the FTD is not local, therefore I can not get the GUI.

if someone could help me step by step to fix my error, I would really appreciate.

Re: connecting FTD with FMC

BmfL — Thu, 25 Nov 2021 17:43:22 GMT

Double check that you have TCP port 8305 open between the two devices / appliances.

Re: connecting FTD with FMC

BmfL — Thu, 25 Nov 2021 17:47:32 GMT

In addition, you might want to check if the the FTD is behind a NAT device (in such a case configuration / registration is slightly different).

In case what was told does not fix your issue, take a look into the following Cisco document and you will be fine:

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/215540-configure-verify-and-troubleshoot-firep.html

Re: connecting FTD with FMC

nsr88nsr69225 — Thu, 25 Nov 2021 21:17:47 GMT

thanks for the documentation.

I have gone through, but I have another error now!

Active Peer [my FTD IP] already exists

but the FTD isn't listed to FMC

Re: connecting FTD with FMC

nsr88nsr69225 — Thu, 25 Nov 2021 21:38:16 GMT

yes the port 8305 is open in both sides

Re: connecting FTD with FMC

BmfL — Thu, 25 Nov 2021 22:08:14 GMT

FTD / FMC they have a bit buggy behaviour sometimes... I would register again on FTD with new key. Then add on FMC side using this new key.

Re: connecting FTD with FMC

nsr88nsr69225 — Fri, 26 Nov 2021 07:33:56 GMT

Thanks for the reply!
should i delete the pending request from FTD!?

yes?

how should i delete the pending requests?

Re: connecting FTD with FMC

BmfL — Fri, 26 Nov 2021 08:31:42 GMT

Yes you should.

Check this out:

https://antonioyan.wordpress.com/2021/06/02/delete-pending-manager-in-ftd/

Re: connecting FTD with FMC

nsr88nsr69225 — Fri, 26 Nov 2021 17:38:11 GMT

thanks a lot for your reply!

it looks good, but I couldn't find this symbol, which I can put the ip add inside.

mdb.sfsnort>  delete from EM_peers where name = '172.16.1.240';

I wanted to connect the ssh with my Mac, but I couldn't find any Cisco documentation about the ssh configuration as well. slow slow, the Cisco is making disappointed