topic Re: cannot register FTD to FMC in Network Security

cannot register FTD to FMC

Rofiqul7343 — Tue, 25 Oct 2022 09:24:22 GMT

FMC and FTD Both side time zone and NTP server same. but when will try to join the FMC to FTD not joining show this massage, even i apply basic troubleshoot, anyone to know how to solve the problem please share the knowledge.

FTD & FMC Both Version: 7.0.4

Re: cannot register FTD to FMC

balaji.bandi — Tue, 25 Oct 2022 15:13:53 GMT

Both are in the same LAN and same network or location? Do you have any Firewall between FMC and FTD?

Re: cannot register FTD to FMC

Aref Alsouqi — Tue, 25 Oct 2022 15:26:58 GMT

The FMC and FTD use port 8305/tcp to establish the management secure channel between them, if you have a firewall in between then you should allow the traffic from both sides on that port. Also, I would recommend checking the actual time that has synch'ed on both the FMC and FTD, sometimes you might configure the NTP server but the device won't synch up for some reason. Also, please take a look at this post of mine of how to add the FTD to FMC for reference:

Add FTD to FMC | Blue Network Security (bluenetsec.com)

Re: cannot register FTD to FMC

Rofiqul7343 — Tue, 25 Oct 2022 18:49:39 GMT

Hey balaji,

yeah FTD AND FMC both are same network and FMC have mount other rack, they are same location.

FTD & FMC can't connected Firewall

Re: cannot register FTD to FMC

balaji.bandi — Tue, 25 Oct 2022 19:48:55 GMT

check if both devices are reachable and see if the network is up, may be try to ping each other.

Hope when you setup a FTD using remote management, rather FDM Local ?

check show managers from console ?

Re: cannot register FTD to FMC

Marvin Rhoads — Wed, 26 Oct 2022 12:46:30 GMT

Can you share the output of "show managers" on the FTD?

Also, on FTD go into expert mode and change to root user then try telnet to FMC on port 8305. Do that same check on the FMC side towards the FTD.

Re: cannot register FTD to FMC

BmfL — Fri, 28 Oct 2022 11:30:02 GMT

Despite you already answer some of this questions it does not hurt to recheck it:

Double check that you have TCP port 8305 open between the two devices / appliances

In addition, you might want to check if the the FTD is behind a NAT device (in such a case configuration / registration is slightly different).

In addion, take a look into the following Cisco document and you will be fine for sure:

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/215540-configure-verify-and-troubleshoot-firep.html