topic Re: Issues downloading a FMC troubleshooting file generated from CLI in Network Security

Issues downloading a FMC troubleshooting file generated from CLI

Chess Norris — Thu, 23 Feb 2023 12:55:09 GMT

Hello,

I'm having issues login to the FMC GUI and need to generate a troubleshooting file from the CLI and send it to TAC.

I have generated the file using the sf_troubleshoot.pl command from expert mode, but when trying to download the file from my desktop, Filezilla is giving me the following error:

"FATAL ERROR: Received unexpected end-of-file from SFTP server"

I'm getting the same error trying to connect to another FMC as well, so it might be an issue with client.

I'm using the FMC admin account in Filezilla, so it shouldn’t be a permission issue.

Is there another SCP/SFTP client for Windows that is working with FMC?

Thanks

/Chess

Edit. I got it to work with WinSCP. I also needed to add the following command in expert mode usermod --shell /bin/bash admin

https://www.cisco.com/c/en/us/support/docs/security/firepower-management-center/217270-download-files-from-fmc-and-ftd.html

Re: Issues downloading a FMC troubleshooting file generated from CLI

lciccare — Wed, 08 Mar 2023 12:02:06 GMT

Hi @Chess Norris .

Is the issue resolved?

Let me know if you have any further questions.

You can also learn more about Cisco Secure Firewall (formerly known as NGFW) through our live Ask the Experts (ATXs) session. Check out Cisco Network Security ATXs Resources [https://community.cisco.com/t5/security-knowledge-base/cisco-network-security-ask-the-experts-resources/ta-p/4416493] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.

Kind regards,

Luca

Re: Issues downloading a FMC troubleshooting file generated from CLI

Marvin Rhoads — Wed, 08 Mar 2023 12:31:23 GMT

Right, in both cases the issues is that the clish interface is not a bash or other proper Unix shell. It's an overlay that hides the OS your application is expecting. Using the work around in the thread you linked fixes that for purposes of scp.

Re: Issues downloading a FMC troubleshooting file generated from CLI

Danny Acosta — Sat, 08 Feb 2025 04:45:25 GMT

Thank you for this post, it was a huge help. For us, there was not option to download the troubleshooting file via the GUI, rebuilding FMC......, so this option was perfect.

Then using Devices > File download is super quick for downloading the file, the CLI output provides the file name, path: /var/common/

Re: Issues downloading a FMC troubleshooting file generated from CLI

eduardo-grados — Wed, 20 Aug 2025 18:37:44 GMT

I just faced the same issue, if anyone has this problem I found that FTDs and FMC does not support TLS on FTP connections. Modern Filezilla versions does not allow you to disable TLS, so you can not use it.
I downloaded another FTP app for windows called "Quick'n easy FTP" I set it up in 2 minutes and was able to transfer files to it.

Re: Issues downloading a FMC troubleshooting file generated from CLI

Marvin Rhoads — Thu, 21 Aug 2025 03:08:59 GMT

The latest filezilla (currently 1.10.5) still allows insecure plain FTP as an option.

Of course you can also use https from FMC. Generating a troubleshooting file will provide a link in the task menu and the file is also place in /var/common where it can be downloaded via the troubleshooting menu.