topic Re: FTD 7 HA Deployment Failure in Network Security

FTD 7 HA Deployment Failure

nehmaan123 — Fri, 21 Jan 2022 08:22:16 GMT

Anyone have any ideas ?

Refer to the following troubleshooting information when contacting Cisco TAC.

Other logs
Jan 21 05:08:12 Starting Export for ApplicationDetectors
Jan 21 05:08:13 Finished Export for ApplicationDetectors
Jan 21 05:08:13 Starting Export for LSP
Jan 21 05:08:31 Finished Export for LSP
Jan 21 05:08:31 Starting Export for NGFWPolicy
Jan 21 05:08:31 Finished Export for NGFWPolicy
Jan 21 05:08:31 Starting Export for PlatformSettings
Jan 21 05:08:31 Finished Export for PlatformSettings
Jan 21 05:08:31 Starting Export for SensorPolicy
Jan 21 05:08:31 Finished Export for SensorPolicy
Jan 21 05:08:31 Starting Export for AccessControl

Jan 21 05:08:46 failed to generate IPS overlay LUA config: (/ngfw/var/sf/bin/snort_config_exporter -lspDirPath /ngfw/var/cisco/deploy/sandbox/exported-files/var/sf/lsp/active-lsp -jsonFile /ngfw/var/cisco/deploy/sandbox/exported-files/customdata/Intrusion/ips_rule_overlay.json -luaOutputDir /ngfw/var/cisco/deploy/sandbox/exported-files/var/sf/detection_engines/ee18f76a-5a8f-11ec-a587-97cca05ddc7d -snortVersion 3.1.0.100-11 -logOutputFile /ngfw/var/log/sf/policy_deployment.log -customDBPath /ngfw/var/cisco/deploy/sandbox/exported-files/customdata/Intrusion/custom_rules_ntd.db) with rcode 1

Re: FTD 7 HA Deployment Failure

balaji.bandi — Fri, 21 Jan 2022 10:10:48 GMT

7.0.X is new version .. so TAC intervention required here to investigate for you.

Re: FTD 7 HA Deployment Failure

Mark Elsen — Fri, 21 Jan 2022 10:15:45 GMT

- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvy35416

Re: FTD 7 HA Deployment Failure

nehmaan123 — Fri, 21 Jan 2022 11:19:11 GMT

Hi,

Yes I think this is the one. Although, I can't say the conditions are the same. I've only just upgraded to latest patch at 7.0!

You gotta love some FirePOWER firefighting.

I'll give it a try soon.

Thanks marce1000

Re: FTD 7 HA Deployment Failure

Yordan1 — Wed, 27 Apr 2022 16:12:46 GMT

Hi Marce,

the error refers to a multidomain. what about a single domain? i have the problem with a single domain