topic Re: Affected by this bug CSCvx89643 in Network Security

Affected by this bug CSCvx89643

SupportAC — Wed, 01 Feb 2023 09:49:47 GMT

Hello everyone,

we are affected by this bug CSCvx89643 and there is only a workaround to fix it: whitelist the certificate on webproxy.

https://bst.cisco.com/bugsearch/bug/CSCvx89643

How do we do that?

Regards

Re: Affected by this bug CSCvx89643

Herald Sison — Wed, 01 Feb 2023 16:45:46 GMT

i have this error pops up once in a while, what i did is i just leave it there and the error will just go away.

Re: Affected by this bug CSCvx89643

Marius Gunnerud — Wed, 01 Feb 2023 22:22:52 GMT

What version FMC are you running? is the error persistent or does it go away after a while?

If you are indeed hitting this bug, you should have a webproxy server between the FMC and the internet, meaning you need to whitelist the certificate on that webproxy sever. This should be done by whoever is the administrator of the webproxy server.

Re: Affected by this bug CSCvx89643

SupportAC — Thu, 02 Feb 2023 09:59:51 GMT

Hello,

the version of MC is 6.7.0.

I just confirmed that there is no proxy between the FMC and the internet. We are receiving the same error message indicated in the bug. We have seen that the Cisco-DNS-and-URL-Intelligence feed hasn´t been update since June from ´22.

Regards

Re: Affected by this bug CSCvx89643

Rob Ingram — Thu, 02 Feb 2023 10:20:27 GMT

@SupportAC perhaps related to this - https://www.cisco.com/c/en/us/support/docs/field-notices/723/fn72332.html

Problem Symptom

Affected Firepower platforms will be unable to receive the latest Talos intelligence feeds (IPs, URLs, DNS Hosts).

If impacted, as you are running 6.7.0 to resolve this issue you'd need to upgrade to 6.7.0.3 at a minimum. However 7.0.5 is the current recommended version.

Re: Affected by this bug CSCvx89643

Marius Gunnerud — Thu, 02 Feb 2023 10:57:40 GMT

Verify that the certificate that the FMC is using to contact tools.cisco.com is still valid. Check the following link for the field notice and how to correct the issue if this is indeed what you are hitting. I know that the only truely corrected version for this field notice is 7.x

https://www.cisco.com/c/en/us/support/docs/field-notices/721/fn72103.html