topic Re: FPR1010 task list error in Network Security

FPR1010 task list error

Henning-Kihle — Thu, 15 Dec 2022 09:14:46 GMT

We have several FPR1010 with Firepower Threat defense that is no longer possible to upgrade, due to that tasks are "Stuck" in the list.

It is related to version 7.1.0.1-28 and 7.1.0-90

We have tried to solve this with some expert commands about the built in SQL services, but not successful.

Attached is two pictures, we really need help!

Rob Ingram — Thu, 15 Dec 2022 09:19:56 GMT

Hi @Henning-Kihle if you cancel the scheduled task, does that clear these tasks?

Is there a problem with the FTD accessing the cloud to download these updates?

Henning-Kihle — Thu, 15 Dec 2022 09:24:23 GMT

Hi Rob.

We have stopped all scheduled tasks several times, no effect on the list, it seems like "Stuck".

Rob Ingram — Thu, 15 Dec 2022 09:40:50 GMT

Henning-Kihle — Thu, 15 Dec 2022 09:56:19 GMT

Hi Rob.

Well I guess this is the correct issue, so TAC maybe would be the next step.

Thank you, Rob!

Filippo Carzaniga — Fri, 31 Mar 2023 09:13:17 GMT

Hi All,

the procedere to fixup the issue:

SSH into the device
Expert (break into linux side)
Sudo su (escalate to root)
cd /ngfw/var/lib/db (Go to neo4j directory.)
pmtool disablebyid tomcat (disable one of the web servers responsible for GUI)

cp -r ngfw.db /ngfw/var/common/ngfw-backup.db ( Backup ngfw.db)
/ngfw/var/jre/bin/java -cp "/ngfw/var/cisco/ngfwWebUi/tomcat/webapps/ROOT/WEB-INF/lib/*" org.neo4j.shell.StartClient -path ngfw.db (Open neo4j shell:)
match (n) where n.status="IN_PROGRESS" return n; This will show all running/in-progress tasks
match (n:JobHistorySecurityIntelligenceFeedDownload) where n.status="IN_PROGRESS" set n.status="FAILED" return n; ( Once you find your task in question, manually set it to fail (in our case it is about SI)
Ctrl + c to exit neo4j shell.
chown -R www:www ngfw.db/ ( Reset file permission)
pmtool enablebyid Tomcat (Re-enable tomcat, may take a few minutes for GUI to come back up)

Henning-Kihle — Fri, 31 Mar 2023 09:41:23 GMT

Hi Filippo.

We got this solution from TAC, and it worked, thx. for your reply