topic Re: Uploading FTD Upgrade file to FMC keeps failing in Network Security

Uploading FTD Upgrade file to FMC keeps failing

alex5388 — Wed, 20 Nov 2024 20:42:36 GMT

Hi all,

As the title says, I'm trying to upload an upgrade file (Cisco_FTD_SSP_FP1K_Upgrade-7.6.0-113.sh.REL.tar) for my FTD to FMC. For some reason when I select the file and click upload the browser behaves as expected. However, after a minute the upload stops and the browser displays a message that says "This page isn't working, <fmc ip> didn't send any data. ERR_EMPTY_RESPONSE".

Any suggestions?

Respectfully,

Alex

Re: Uploading FTD Upgrade file to FMC keeps failing

Jonatan Jonasson — Thu, 21 Nov 2024 00:21:40 GMT

Can we safely assume, that since you're planning to upgrade a FTD device to 7.6, that your FMC is already in version 7.6?

And just out of curiosity, is there a reason you're not just using the download feature in the FMC, instead of manually fetching and uploading upgrade packages?

But if the FMC isn't in 7.6, I would recommend upgrading the FMC first.
If you're in 7.6, have you tried another browser or an incognito window?

Re: Uploading FTD Upgrade file to FMC keeps failing

balaji.bandi — Thu, 21 Nov 2024 07:29:40 GMT

Looks for me the connection resetting i guess.

what is the path between Client and FMC ? (is this in same network ?)

try different browser, or different method to upload file ?

after you get error, are you still able to connect FMC ?

Re: Uploading FTD Upgrade file to FMC keeps failing

alex5388 — Thu, 21 Nov 2024 14:56:15 GMT

The FMC is at 7.2 and FTD at 7.0.3. This is on a public sector network so there's no connection to Cisco's sites.

Re: Uploading FTD Upgrade file to FMC keeps failing

alex5388 — Thu, 21 Nov 2024 15:00:14 GMT

It goes Client, Switch, FMC. If I pull up Wireshark and watch the transaction there is application data getting sent but after a minute or two the connection will just close. I'm considering setting up my own simple http server because their is an option to upload the file on FMC with a URL, but to Jonatan's point, maybe I need to upgrade the FMC itself first.

And yes, after it fails I'm still connected to the FMC. I have been trying with Chrome, but I'll give Edge a shot as well.

Re: Uploading FTD Upgrade file to FMC keeps failing

Jonatan Jonasson — Sat, 23 Nov 2024 00:13:04 GMT

Ok so the FMC is at 7.2, and you're uploading an 7.6 upgrade packages for FTD.

Considering that you cannot manage FTD devices in newer versions than the FMC, it could potentially be a part of the problem.
(Some check failing and FMC is just not showing the error message?)

If you look at the compatability matrix, it states:
"You cannot upgrade a device past the management center. Even for maintenance (third-digit) releases, you must upgrade the management center first."
https://www.cisco.com/c/en/us/td/docs/security/secure-firewall/compatibility/management-center-compatibility.html

So I would consider upgrading the FMC first, and then try uploading the FTD package.
Because that's essentially the process you need to take anyway.

Based on your versions this will probably be a two step upgrade, since FMC 7.6 cannot manage older FTD than 7.1, so you'll need to upgrade the FTD to 7.2 first (or anything above 7.1).

Re: Uploading FTD Upgrade file to FMC keeps failing

alex5388 — Mon, 23 Dec 2024 23:09:33 GMT

Update: I was able to upload the FMC and FTD upgrade files using the intended method through the FMC GUI. I tried it from a different PC on the same subnet and it went through without any problems. I still don't understand why it was getting stopped in the first place.

Re: Uploading FTD Upgrade file to FMC keeps failing

alex5388 — Wed, 15 Jan 2025 20:13:31 GMT

Figured it out. There is a box to check in the user configurations of FMC that says "exempt from browser timeout" that was greyed out. When I uncheck the Administrator box, it became clickable. After saving the configuration I was able to upload with no issues.