topic Re: Policy Pre-deployment from FMC to FTD problem in Network Security

Policy Pre-deployment from FMC to FTD problem

Stevensky — Fri, 11 Mar 2022 15:54:41 GMT

Hi all,

I've had a problem for a while with my FMC.
In fact, there was a DNS problem on my network and I have since found that all the policies I apply on the Cisco FMC do not deploy on the FTDs. I keep getting the following error:
Timed out collecting policies and objects at the Pre-Deploy Global Configuration Generation

I would like to point out that the FTDs are able to communicate with the FMC.
As an action, I restarted the sftunnel which has the status established but the problem remains

Re: Policy Pre-deployment from FMC to FTD problem

balaji.bandi — Fri, 11 Mar 2022 16:15:39 GMT

Try restart FMC and test ?

Re: Policy Pre-deployment from FMC to FTD problem

Stevensky — Thu, 17 Mar 2022 12:52:36 GMT

Sorry for the response time
Restart or Reload FMC ?
I did a restart but I've the same error :

Deployment failed due to failure collecting policies and objects. If problem persists after retrying, contact Cisco TAC.

I also observe in the logs at deployment time the following error:
Error in creating snapshot DOM

Re: Policy Pre-deployment from FMC to FTD problem

balaji.bandi — Thu, 17 Mar 2022 13:41:42 GMT

Looks for me some space issue here. check the FMC space

https://www.cisco.com/c/en/us/td/docs/security/firepower/621/configuration/guide/fpmc-config-guide-v621/monitoring_the_system.html

some troubleshoot tips :

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw-virtual/215258-troubleshooting-firepower-threat-defense.html

Re: Policy Pre-deployment from FMC to FTD problem

Gaber Ali — Wed, 19 Jun 2024 18:16:46 GMT

hello All,

Just to share with you my experience for solving this issue.

I have faced the same Issue in FMC 1600 - OS version 7.0.5,

RCA: there was an SRU update stuck which leads the FMC failed to deploy the policy at its second step (as per the steps mentioned in URL: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw-virtual/215258-troubleshooting-firepower-threat-defense.html )

to solve the Issue:

- we have removed the stuck SRU update,

- download the latest SRU and LSP update from cisco website ,

- uploaded it to the FMC and perform SRU & LSP update,

- re deploy the policy to the managed devices.

the issue was resolved,