topic Re: FTD unable to ping tools.cisco.com from CLI in Network Security

FTD unable to ping tools.cisco.com from CLI

NetworkMonkey101 — Thu, 17 Oct 2024 08:16:49 GMT

I have an FTD which is able to ping 8.8.8.8 and internet but not able to ping system tools.cisco.com. Threat Defence Cloud error is showing. This FTD is using the same DNS policy as another which is able to ping tools.cisco.com

Re: FTD unable to ping tools.cisco.com from CLI

balaji.bandi — Thu, 17 Oct 2024 08:23:08 GMT

Try ping the IP resolved by tools.cisco.com (is that works) the updates uses different ports like 80 or 443 ( need to look the document what port they get updates.

Non-authoritative answer:
Name: tools.cisco.com
Addresses: 2001:420:1101:5::a
72.163.4.38

Threat Defence Cloud error is showing.

what is the error you getting ?

Re: FTD unable to ping tools.cisco.com from CLI

NetworkMonkey101 — Thu, 17 Oct 2024 08:35:14 GMT

Hi seeing this when attempting to ping tools.cisco.com

Error on FTD shows

states please check network connection

Re: FTD unable to ping tools.cisco.com from CLI

NetworkMonkey101 — Thu, 17 Oct 2024 08:37:01 GMT

Not sure if this is relevant or another issue but the SSE connector is showing "waiting" on the FTD that cannot reach tools.cisco.com and on the working model it is green..

Re: FTD unable to ping tools.cisco.com from CLI

NetworkMonkey101 — Thu, 17 Oct 2024 09:20:46 GMT

Ping is failing from the management int

Re: FTD unable to ping tools.cisco.com from CLI

Rob Ingram — Thu, 17 Oct 2024 09:29:59 GMT

@NetworkMonkey101 run "show network" is DNS configured for the management interface?

If not configure using the "configure network dns servers <ip>" command.

https://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/b_Command_Reference_for_Firepower_Threat_Defense/c_3.html#wp2291657657

Re: FTD unable to ping tools.cisco.com from CLI

balaji.bandi — Thu, 17 Oct 2024 11:22:44 GMT

This FTD is using the same DNS policy as another which is able to ping tools.cisco.com

as per your post i was in impression the DNS work, that is reason i have edited my comment.

are you able to ping with IP address which resolved to tools.cisco.com?

check DNS config :

https://www.cisco.com/c/en/us/td/docs/security/firepower/630/fdm/fptd-fdm-config-guide-630/fptd-fdm-system.html

Re: FTD unable to ping tools.cisco.com from CLI

NetworkMonkey101 — Thu, 17 Oct 2024 13:13:37 GMT

I am missing hostname, dns and domain. I can see I can set the hostname and add dns from cli how can I add the domain?

added the hostname and dns and can no ping tools.cisco.com and also perform dig command, domain not showing though and needs adding, what is the command as cannot see it under configure network >

Re: FTD unable to ping tools.cisco.com from CLI

Aref Alsouqi — Thu, 17 Oct 2024 13:46:04 GMT

"added the hostname and dns and can no ping tools.cisco.com" ... Did you mean to say "... can now ping ..."?

To add the search domain you can use the command "configure network dns searchdomains ...".