topic Re: Firepower stuck during install in Network Security

Firepower stuck during install

ziqex — Mon, 03 Oct 2022 14:09:41 GMT

Hi,

I wanted to install asasfr-sys-7.0.4-55. on PID: ASA5516

system install ftp://10.20.210.5/asasfr-sys-7.0.4-55.pkg

The install process reached 77% and then got stucked.

asasfr-sys-7.0.4-55 77%[+++++=========> ] 966.78M --.-KB/s eta 17m 58s

I've then stop the session and reconnected back.

However, now after running session sfr console I receive blank screen.

session sfr console
Opening console session with module sfr.
Connected to module sfr. Escape character sequence is 'CTRL-^X'.

Any ideas how can I get firepower console back?

Thank you.

Regards,

Daniel

Re: Firepower stuck during install

Sheraz.Salim — Mon, 03 Oct 2022 15:13:14 GMT

ASA 9.16(x)/ASDM 7.16(x)/Firepower 7.0.0/7.0.x is the final version for the ASA FirePOWER module on the ASA 5516-X.

The 5516-X series take long time to install the SFR software. try to uninstall and re-install it.

Install and Configure a FirePOWER Services Module on an ASA Platform - Cisco

please follow this above guide again and give plenty of time for 5516 to install the software as it take long time.

Re: Firepower stuck during install

Marvin Rhoads — Mon, 03 Oct 2022 16:39:08 GMT

I agree with @Sheraz.Salim - I have seen these take upwards of 2 hours to install.

Re: Firepower stuck during install

RachelGomez161999 — Tue, 04 Oct 2022 05:47:08 GMT

One of my biggest frustrations with Cisco Firepower Threat Defense is when deployment gets stuck. Normally 1-3 minutes is all it takes to deploy change after making it but once you see it go back 5 or 10 you usually have a problem. Some screenshots online have hours and even hundreds of hours basically it never finishes. Usually this is caused by two problems. One you can back off the change in the Firepower Management Console and remake it or two the firewall just needs to be rebooted before doing either you have to stop the job from deploying.

Cisco.jpeg
First we run Omniquery.pl

admin@myfmc:~# OmniQuery.pl -db mdb -e "select status,category,hex(uuid),body from notification;" | grep "\ 7\ "
Then we get the results and take the uuid

admin@myfmc:~# OmniQuery.pl -db mdb -e 'delete from notification where uuid=unhex("000000610000BD2B000244600005009E");'
Now check again to make sure its gone

admin@myfmc:~# OmniQuery.pl -db mdb -e "select status,category,hex(uuid),body from notification;" | grep "\ 7\ "
Sometimes the process above needs to be repeated a few times but once clean I usually reboot both my firewalls in the HA pair and then re deploy. Those of us who were in the early days of Firepower 6.x remember it often but this doesn’t happen much anymore but when it does its nice to have the fix above.

This may help you,

Rachel Gomez

Re: Firepower stuck during install

Sheraz.Salim — Tue, 04 Oct 2022 06:24:09 GMT

@RachelGomez161999 you having issues with pushing the policies (deployment issues) where as the original question is the SFR taking long time to build up/installation issue.

FMC/FTD 7.x the deployment time is much faster compare to old software 6.x/5.x

Re: Firepower stuck during install

ziqex — Tue, 04 Oct 2022 10:10:39 GMT

Should I be able to see a progress bar with %?

I've tried with different version now - system install ftp (..) asasfr-sys-6.6.5-81.pkg

I could see the

Verifying
Downloading

But now only see the dots

...

Thanks

Re: Firepower stuck during install

Sheraz.Salim — Tue, 04 Oct 2022 11:37:47 GMT

No you wont be able to see the progress how much is download/ed. Best you can do is once download is started go grab a few cup of coffees take some rest and come back in few hours (6-8 hours) by this time it will be done.

Re: Firepower stuck during install

Marvin Rhoads — Tue, 04 Oct 2022 13:24:21 GMT

I usually rely on the FTP server log to monitor the download progress. Once download completes it will write to disk, verify the checksum and then begin installing.

Re: Firepower stuck during install

ziqex — Tue, 04 Oct 2022 13:50:50 GMT

In TITAN FTP I can see the session activity but don't see the progress with % or info how much data has been transferred already for the specific session.