topic FTD Troubleshooting issue _ system support firewall-engine-debug in Network Security

FTD Troubleshooting issue _ system support firewall-engine-debug

ShareefKooliyodan0444 — Mon, 20 Nov 2023 10:10:08 GMT

Dears

have anyone get issue like below from FTD firewall for following debug cmd

system support firewall-engine-debug

Please specify an IP protocol:
Please specify a client IP address: 172.20.2.61
Please specify a client port:
Please specify a server IP address: 8.8.8.8
Please specify a server port:
Monitoring firewall engine debug messages

: returned from url lookup, url_info is 70 2003 0 0 0 0 0 0 0 0
: DataMessaging_GetURLData: Returning URL_DBTYPE for dev-prod06.conferdeploy.net
: returned from url lookup, url_info is 90 2053 0 0 0 0 0 0 0 0
: DataMessaging_GetURLData: Returning URL_DBTYPE for msedge.b.tlu.dl.delivery.mp.microsoft.com
: returned from url lookup, url_info is 70 2003 0 0 2124 0 0 0 0 0
: DataMessaging_GetURLData: Returning URL_DBTYPE for dev-prod06.conferdeploy.net
: returned from url lookup, url_info is 70 2003 0 0 0 0 0 0 0 0
: DataMessaging_GetURLData: Returning URL_DBTYPE for dev-prod06.conferdeploy.net

its continuously coming when i troubleshoot with debug cmd.

Re: FTD Troubleshooting issue _ system support firewall-engine-debug

urathod — Tue, 05 Dec 2023 07:33:47 GMT

The logs you're seeing are not necessarily indicative of an issue. They seem to be informational messages about URL lookups from the firewall engine. These are URLs that your system is trying to access, and the firewall is retrieving information about them.

Here's what these messages are saying:

"returned from url lookup, url_info is ***********" : This means the system looked up the URL and returned some information.
"DataMessaging_GetURLData: Returning URL_DBTYPE for [URL]" : This tells you that the system is retrieving URL data for the specified URL.

If these messages are causing issues or you wish to stop them, you may consider the following:

If the messages are related to a specific application, consider checking the settings of the application to limit its internet access or restrict it to certain URLs.
Check your firewall rules. If these URLs are not necessary, you may be able to block them or limit their access.
If you're debugging, you might be able to adjust your logging level to exclude these informational messages.

If you find my reply solved your question or issue, kindly click the 'Accept as Solution' button and vote it as helpful.

You can also learn more about Secure Firewall (formerly known as NGFW) through our live Ask the Experts (ATXs) session. Check out Cisco Network Security ATXs Resources [https://community.cisco.com/t5/security-knowledge-base/cisco-network-security-ask-the-experts-resources/ta-p/4416493] to view the latest schedule for upcoming sessions, as well as the useful references, e.g. online guides, FAQs.

Re: FTD Troubleshooting issue _ system support firewall-engine-debug

ShareefKooliyodan0444 — Wed, 06 Dec 2023 06:23:13 GMT

its not resolved , the below message continuously coming once i enter for

system support firewall-engine-debug

cisco TAC advised for rebooting FTD, i am finding any other than reboot .