topic Re: change clock and updating vdb in Network Security

change clock and updating vdb

gogi99 — Mon, 19 Aug 2024 05:41:38 GMT

my company has the firepower 1120. when i want upfate, maualy or scheduled, geolocation, vdb, intrusion rule, i receive error like on picture

i noticed on my device

dri-firepower# show timezone
Timezone: UTC
dri-firepower# show clock
Thu Aug 15 06:42:08 UTC 2024
dri-firepower#

for my country is wrong timezone. im in UTC+1. how change time zone. maybe its solution for above problem?

Re: change clock and updating vdb

Mark Elsen — Mon, 19 Aug 2024 07:45:20 GMT

- FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm03931

For time zone checkout : https://community.cisco.com/t5/network-security/ftd-2100-ntp-timezone-issue/m-p/3372557#M924019
Also you may try to use the command configure user-time-zone or the API explorer to set the time zone settings when using a FDM locally managed FTD.

Re: change clock and updating vdb

Marvin Rhoads — Mon, 19 Aug 2024 08:50:28 GMT

@gogi99 - More likely you are running an old version affected by the bug as suggested by @Mark Elsen. Cisco changed the CA they use and older versions didn't trust that CA.

What version are you running?

Re: change clock and updating vdb

Marius Gunnerud — Mon, 19 Aug 2024 09:51:03 GMT

What version are you running on the FTD? There was a bug a while ago where we needed to update the internal certificates on the FTD (ref. the links @Mark Elsen has posted.)

Re: change clock and updating vdb

gogi99 — Mon, 19 Aug 2024 10:49:09 GMT

my version of device is

Model : Cisco Firepower 1120 Threat Defense (78) Version 6.6.1 (Build 91)
UUID : 639d71b6-251a-11eb-909f-93c38cfed737
Rules update version : 2023-01-09-001-vrt
VDB version : 361

Re: change clock and updating vdb

Marius Gunnerud — Mon, 19 Aug 2024 11:34:13 GMT

Then you are affected by the bug. This bug is fixed in 7.x. The recommended fix is to upgrade to a version where this issue is solved.

If you decide to fix this manually your self (not involving TAC) you can follow the steps in the link below. I do not recommend this and if you decide to do this you do so at your own risk.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvm81052

Re: change clock and updating vdb

gogi99 — Mon, 19 Aug 2024 12:28:12 GMT

where i can find the v7.1 of my firepower 1120? some instruction? can i use the FDM

Re: change clock and updating vdb

Marvin Rhoads — Mon, 19 Aug 2024 13:22:55 GMT

7.2.8 would be recommended. It can be found here:

https://software.cisco.com/download/home/286322198/type/286306337/release/7.2.8

Upgrade instructions for your version 6.6 using FDM are shown here:
https://www.cisco.com/c/en/us/td/docs/security/firepower/660/fdm/fptd-fdm-config-guide-660/fptd-fdm-mgmt.html#id_32969

Re: change clock and updating vdb

gogi99 — Tue, 20 Aug 2024 09:02:08 GMT

when i click on your link for downloading, i cannot download. i receive message like on image

Re: change clock and updating vdb

Marvin Rhoads — Tue, 20 Aug 2024 10:18:20 GMT

The software is not free for anyone to download. As the message indicates, you must have a support contract associated with your cisco.com ID.

Re: change clock and updating vdb

Marius Gunnerud — Tue, 20 Aug 2024 10:23:20 GMT

to download software images from Cisco you need to have a valid support contract. If you do have a valid contract you need to get your Cisco partner to associate your CCO ID with the contract to permit you to download.