Estreamer connection to Firepower Management Center

mmahadevan — Mon, 17 Oct 2022 11:35:22 GMT

Hello All,

We have downloaded estreamer encore client and tried to establish connection to Firepower Management Center to collect logs in JSON Format.

But when we run the command,

./encore.sh foreground

we are getting the below error,

there has been a client authentication failure (please check that your outbound IP address matches that associated with your certificate - note that if your device is subject to NAT then the certificate IP must match the upstream NAT IP)

Could you please let me know the changes to make in estreamer file or Firepower Management??

Thanks

Muthu Mahadevan

Re: Estreamer connection to Firepower Management Center

betliu — Sat, 05 Nov 2022 14:21:40 GMT

Please double check if the client cert was created with a wrong IP.
You may try to regenerate and reintegrate the cert,

Document for your reference: Firepower System Event Streamer Integration Guide

https://www.cisco.com/c/en/us/td/docs/security/firepower/620/api/eStreamer/EventStreamerIntegrationGuide/ConfiguringEstreamer.html

You can open case to Cisco TAC for further troubleshooting if required.

Hope it can help you.

topic Re: Estreamer connection to Firepower Management Center in Network Security

Estreamer connection to Firepower Management Center

Re: Estreamer connection to Firepower Management Center