topic Re: Smart Agent communication error with Smart Licensing Cloud in Network Security

Smart Agent communication error with Smart Licensing Cloud

RocioCascomuga70087 — Wed, 24 Feb 2021 07:56:04 GMT

How to solve the following error that gives in Firepower Threat Defense "Smart Agent communication error with Smart Licensing Cloud". Could you help me?

Re: Smart Agent communication error with Smart Licensing Cloud

MaErre21325 — Thu, 10 Feb 2022 16:11:45 GMT

hello,

i've the same problem, any tips?

Re: Smart Agent communication error with Smart Licensing Cloud

Aref Alsouqi — Thu, 10 Feb 2022 16:53:58 GMT

Recently a few people seem to complain about similar issues, and personally I ran into a few issues recently when I was trying to sync ISE with Cisco smart portal. For me it just worked by trying again after some time.

Re: Smart Agent communication error with Smart Licensing Cloud

MaErre21325 — Fri, 11 Feb 2022 10:30:00 GMT

Hello Aref,

yes, it seems weird, dns, ping and https request via cli to cisco.com succeded, just re synching from fmc dashboard fails.

i'll retry on monday, at the moment it is a false positive warning for me.....

Re: Smart Agent communication error with Smart Licensing Cloud

Aref Alsouqi — Fri, 11 Feb 2022 10:48:04 GMT

Interesting! try to check this troubleshooting guide:

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/215838-fmc-and-ftd-smart-license-registration-a.html

If it does not help I would go TAC.

Re: Smart Agent communication error with Smart Licensing Cloud

Chakshu Piplani — Fri, 11 Feb 2022 11:00:48 GMT

Hi All,

This is one of the trending issues and is mentioned in a field notice as well here:

https://www.cisco.com/c/en/us/support/docs/field-notices/721/fn72103.html

It is highly recommended to upgrade, but in case you do not wish to kindly contact TAC to help you do the workaround for defect CSCwa88571

Regards,

Chakshu

Do rate helpful posts!

Re: Smart Agent communication error with Smart Licensing Cloud

Marvin Rhoads — Fri, 11 Feb 2022 12:45:14 GMT

Yes - this QuoVadis CA issue is affecting multiple Cisco products. ASA, Firepower, IOS, NX-OS, CUCM etc.

Here are a few more citations:

https://www.cisco.com/c/en/us/support/docs/field-notices/722/fn72289.html
https://www.cisco.com/c/en/us/support/docs/field-notices/703/fn70319.html
https://www.cisco.com/c/en/us/support/docs/field-notices/721/fn72121.html
https://www.cisco.com/c/en/us/support/docs/field-notices/722/fn72298.html
https://www.cisco.com/c/en/us/support/docs/field-notices/723/fn72323.html
https://www.cisco.com/c/en/us/support/docs/field-notices/723/fn72318.html
https://www.cisco.com/c/en/us/support/docs/field-notices/721/fn72115.html

Re: Smart Agent communication error with Smart Licensing Cloud

jwornstaff — Fri, 11 Feb 2022 15:05:19 GMT

I have the same issue with 6.6.5, and just discovered this bug link

Bug Search Tool (cisco.com)

FMC SLR license 'shows continuous Smart agent communication with Smart Licensing Cloud' alert
CSCvw29561

Re: Smart Agent communication error with Smart Licensing Cloud

MaErre21325 — Fri, 11 Feb 2022 15:19:48 GMT

Hi guys,

my problem is a little bit different, the FMC is correctly registered to cisco and the last synch is today (1st image), the problem is the warning received in the 2nd screenshots althought cisco is reachable.

I don't think the certificate error is my case.

Re: Smart Agent communication error with Smart Licensing Cloud

bbouchaiba — Fri, 11 Feb 2022 15:25:53 GMT

I had the same issue, called tac and this how we fix it:

Its possible you are experiencing the following defect: https://cdetsng.cisco.com/summary/#/defect/CSCwa89534

Please perform the following workaround on the FMC cli and let me know if this resolves your issue:

expert //Puts you into expert mode
sudo su - //after typing in password, this puts you in root privilege
rm /etc/sf/gch/call_home_ca //removes the certificate used for the call home process
pmtool restartbyid sla //restarts the sla process and creates a new certificate for the call home process

After the workaround is performed, try registering your FMC again.

Re: Smart Agent communication error with Smart Licensing Cloud

MaErre21325 — Tue, 15 Feb 2022 09:23:34 GMT

hi,

thanks for the tip, in the next month i'll have to upgrade from 6.4.0 to 7.0.0, i'll check if it will fix it, otherwise i'll try your procedur.

thanks a lot

Re: Smart Agent communication error with Smart Licensing Cloud

florian.hanig1 — Thu, 17 Feb 2022 10:36:56 GMT

Hi MaErre21325

I've exactly the same Issue.

Did you resolved it ?

Re: Smart Agent communication error with Smart Licensing Cloud

MaErre21325 — Thu, 17 Feb 2022 10:54:43 GMT

Hi Florian,

i'll schedule the upgrade to a fixed versionin the next months, but as @bbouchaiba posted, you can try that solution to fix instead of upgrade.

Re: Smart Agent communication error with Smart Licensing Cloud

plwalsh — Thu, 03 Mar 2022 15:08:24 GMT

Hi Rocio,

I had the same issue since Feb 8th. I updated my standalone FMC 6.6.4 to 6..6.6.5 and applied the DE hotfix (to fix a different cert issue that is documented here https://www.cisco.com/c/en/us/support/docs/field-notices/721/fn72103.html ) but I still had the same issue with 'Smart Agent communication error with Smart Licensing Cloud' health monitor alerts.

I found this info https://www.cisco.com/c/en/us/support/docs/field-notices/721/fn72103.html

Because I was running a fixed version of FMC software (6.6.5) I followed the steps for Firepower Software in the Workaround/Solution. After deleting the call_home_ca file and restarting the Smart License Agent process (process ID sla), the health monitor alerts stopped.

Re: Smart Agent communication error with Smart Licensing Cloud

peter.matuska1 — Fri, 25 Mar 2022 07:33:37 GMT

Hi, have you found the solution?

thank you

Re: Smart Agent communication error with Smart Licensing Cloud

MaErre21325 — Fri, 25 Mar 2022 09:09:58 GMT

hi,

yes, you need to upgrade or manually load the new certificate

Re: Smart Agent communication error with Smart Licensing Cloud

peter.matuska1 — Fri, 25 Mar 2022 09:20:15 GMT

Hi,

can you share what certificate is needed?

thank you

Re: Smart Agent communication error with Smart Licensing Cloud

plwalsh — Tue, 29 Mar 2022 12:24:17 GMT

Peter,

The certificate information that you need can be found at
Field Notice: FN - 72103 - ASA, FXOS and Firepower Software: QuoVadis Root CA 2 Decommission Might Affect Smart Licensing, Smart Call Home, And Other Functionality - Software Upgrade Recommended - Cisco

Regards

Re: Smart Agent communication error with Smart Licensing Cloud

sd-wan_engineer — Tue, 08 Nov 2022 14:36:01 GMT

hi,

Same issue here (FMC v7.0.1), I got the same error messages:

Error message: Smart license communication error with Smart License Cloud
Error message: VPN status inactive due to idle timeout
filtering suddenly categorise all HTTPS traffic as SPAM
Site-2-Site tunnels down

I am trying to upgrade the FMC but I cannot due that there is one device that is associated to the FMC but is not up to date "Device configurations are out-of-date. Deploy configurations." I cannot deploy this device because I cannot reach the device, the site-2-site tunnel went down when this issue started.

Re: Smart Agent communication error with Smart Licensing Cloud

Michael Weller — Mon, 13 May 2024 13:51:14 GMT

We have the same issue with 7.2.5 and it was installed as 7.2.4 then updated. So, referring to the old certificate issues and updating alone does not help. However, if you are below 7.2.5 you should probably update anyway.