topic Re: REMOVE FTD FROM PENDING DEPLOYMENT IN FMC in Network Security

REMOVE FTD FROM PENDING DEPLOYMENT IN FMC

Bledian — Tue, 17 Jan 2023 13:46:59 GMT

Hello community,

My client has around 30 FTDs which are managed by the same FMC. I want to upgrade FMC but, to do so FMC requires to deploy all pending FTDs, which in our case they are like 15 FTDs which at the moment are offline and I cannot deploy them (so there deployment status is pending).

I was wondering if there is any command or method that I could remove the FTDs from pending request without deleting the entire FTD s from FMC and reconfiguring again, and that way i could upgrade FMC.

Best regards,

BR.

Re: REMOVE FTD FROM PENDING DEPLOYMENT IN FMC

Marvin Rhoads — Tue, 17 Jan 2023 16:15:06 GMT

There's no easy way to do this as far as I know. The concept of operations requires that all pending deployments be completed prior to upgrading. I think even a cli upgrade would check this and fail to upgrade.

Re: REMOVE FTD FROM PENDING DEPLOYMENT IN FMC

balaji.bandi — Tue, 17 Jan 2023 16:18:07 GMT

Agreed with @Marvin Rhoads its hard - may be contact TAC is good for asistsnace

you like to try some perl files check below thread@

https://community.cisco.com/t5/network-security/fmc-deployment-got-stuck-at-5-for-almost-3-hours/m-p/4621125

Re: REMOVE FTD FROM PENDING DEPLOYMENT IN FMC

Eric R. Jones — Tue, 17 Jan 2023 21:31:14 GMT

I put this in my wish list so that we could stop a deployment that wasn't required due to any reason and was told that it's not option but was being considered for the future. That was more than year ago and so far, nothing.

Re: REMOVE FTD FROM PENDING DEPLOYMENT IN FMC

Bledian — Thu, 26 Jan 2023 09:37:16 GMT

I will get in touch with a TAC and see if there is any solution from them !. Thanks all for reply.

Re: REMOVE FTD FROM PENDING DEPLOYMENT IN FMC

Lamki911 — Mon, 21 Aug 2023 08:15:04 GMT

Hi there,

We had the same issue, trying to upgrade the FMC with offline FTDs, I found a way to proceed with the upgrade without deployment.

- Devices > Devices Management
- Edit the offline device with pending deployment
- under Device tap > disable Management.
- the device will be removed from the pending deployment queue and you can upgrade the FMC.
- after the upgrade you can enable it even if the device is offline, it will show you a timeout message but that is fine it will be enabled and whenever the device is online it will connect.

Hope this helps!

Re: REMOVE FTD FROM PENDING DEPLOYMENT IN FMC

briwils3 — Mon, 26 Feb 2024 22:49:20 GMT

Please contact TAC. We have an internal process to clear pending deployments but it involves messing with databases. This can wreak havoc with the device if someone doesn't know what they are doing, so it is not public.

Re: REMOVE FTD FROM PENDING DEPLOYMENT IN FMC

williaat0125 — Tue, 12 Mar 2024 20:49:45 GMT

Great idea. I will have to try this. One of the things I wish we could do is to select or unselect specific deployments within a FTD. We should also be able to delete a deployment and not install it.

Re: REMOVE FTD FROM PENDING DEPLOYMENT IN FMC

williaat0125 — Wed, 26 Jun 2024 16:35:23 GMT

I can definitely confirm that you cannot complete an upgrade if the FTD has pending deployments. The error message you receive is basic to deploy policy, but it really means "deploy your pending deployments" then perform the upgrade.