topic Re: Getting Warning in FMC Cisco Intelligence Feed Received Code in Network Security

Getting Warning in FMC Cisco Intelligence Feed Received Code

King_1988 — Wed, 06 Sep 2023 16:40:33 GMT

Hi,

I am getting above warning from FMC (Version : 6.4.10). Internet reachability is ok from FMC. And Snort rules are updated accordingly. Then what could be the issue and how to solve it?

Re: Getting Warning in FMC Cisco Intelligence Feed Received Code

Mark Elsen — Wed, 06 Sep 2023 12:15:10 GMT

- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvv14304

Re: Getting Warning in FMC Cisco Intelligence Feed Received Code

Marvin Rhoads — Wed, 06 Sep 2023 16:14:29 GMT

FMC 6.4.0.10 (there was no 6.4.10 version) may also be affected by this field notice: https://www.cisco.com/c/en/us/support/docs/field-notices/723/fn72332.html

Please upgrade from this very old FMC version to something currently supported! (at least 6.4.0.16 but preferably something much later than that)

Re: Getting Warning in FMC Cisco Intelligence Feed Received Code

King_1988 — Wed, 06 Sep 2023 16:17:48 GMT

Does it have any service impact?

Re: Getting Warning in FMC Cisco Intelligence Feed Received Code

Marvin Rhoads — Wed, 06 Sep 2023 16:21:10 GMT

It just means you won't have the protection your firewall would otherwise be giving via updates to the SI feed - newly known malicious addresses and URLs will not be automatically blocked as they would have otherwise been.

Re: Getting Warning in FMC Cisco Intelligence Feed Received Code

King_1988 — Wed, 06 Sep 2023 16:26:02 GMT

So what is the solution other than upgrading?

Re: Getting Warning in FMC Cisco Intelligence Feed Received Code

Marvin Rhoads — Wed, 06 Sep 2023 16:33:57 GMT

Put up with the warning - it is rightly pointing out that you are not getting the security you might otherwise assume.

Re: Getting Warning in FMC Cisco Intelligence Feed Received Code

King_1988 — Wed, 06 Sep 2023 16:39:43 GMT

Thanks a lot Marvin for your information. I will let you know after upgrading the version.

Re: Getting Warning in FMC Cisco Intelligence Feed Received Code

King_1988 — Thu, 07 Sep 2023 05:40:58 GMT

Thanks a lot Marvin. After updating patches to 6.4.0.14 the error gone. But one thing i am just confused about that what kind of risk does it have if Security Intelligence Feed is not being downloaded ? On the other hand, Snort rules are getting updated fine. So what is the major difference between these two?