topic Re: Getting error while deploying policy on firepower in Network Security

Getting error while deploying policy on firepower

engineer467 — Fri, 08 Jul 2022 16:15:46 GMT

Firepower running on version 6.4.0

Getting below error while deploying the changes-

Error resolving rule (15) : user configured dest networks but none were found.

I am not sure but I think it is related to rule 15, have attached the screenshot.

Re: Getting error while deploying policy on firepower

Rob Ingram — Fri, 08 Jul 2022 16:20:37 GMT

@engineer467 I've not seen this error before. Had you configured rule #15 with the destination object and subsequently deleted the object perhaps? If not upgrade, 6.4 is very old and loads of bug fixes since then.

Re: Getting error while deploying policy on firepower

engineer467 — Fri, 08 Jul 2022 16:24:28 GMT

Hi Rob, destination object is present.

strange thing is Even if i try to delete it, or edit it, it gives back the error-

Error resolving rule (14) : user configured dest networks but none were found

So this time there is error in rule 14.

perhps u r right, an upgrade might fix it.

Re: Getting error while deploying policy on firepower

engineer467 — Fri, 08 Jul 2022 17:22:56 GMT

Can i go to 7.0.1 directly from 6.4.0??

Re: Getting error while deploying policy on firepower

Rob Ingram — Fri, 08 Jul 2022 17:32:42 GMT

@engineer467 yes you can.

https://www.cisco.com/c/en/us/td/docs/security/firepower/70/relnotes/firepower-release-notes-700/upgrade.html#Cisco_Reference.dita_581de4ac-7110-4633-bb1e-8369b85b3181

Re: Getting error while deploying policy on firepower

MHM Cisco World — Fri, 08 Jul 2022 17:39:50 GMT

I don't have a lot info. about firepower but are the IP you use as source is reachable by DMZ-zone ?