topic Re: HA pair in Active/Active. Cannot deploy policy in Network Security

HA pair in Active/Active. Cannot deploy policy

kerande — Mon, 30 Dec 2024 16:27:25 GMT

Hello,

I am hoping to get some help in deploying HA with FTD 2140 devices. We recently upgraded to 7.4.2.1 (build30). Since the upgrade, the HA pair went into Active/Active and I have not been able to correct the issue. I forced the HA to break. When I reconfigured it, I get the following error:

"Deployment failed due to failure in retrieving running configuration information from device. Please check connectivity with the device and retry deployment"

There does not appear to be any communication via the failover/state link. As far as hardware, nothing has changed. Any help is much appreciated. Thank you!

Re: HA pair in Active/Active. Cannot deploy policy

MHM Cisco World — Mon, 30 Dec 2024 16:43:02 GMT

As workaround downgrade to old ver.

And open TAC to check why upgrade make both FW active.

MHM

Re: HA pair in Active/Active. Cannot deploy policy

Mark Elsen — Mon, 30 Dec 2024 22:27:00 GMT

- Review these bug reports : https://bst.cloudapps.cisco.com/bugsearch?pf=prdNm&kw=Deployment%20failed%20due%20to%20failure%20in%20retrieving%20running%20configuration%20information%20from%20device&bt=custV&sb=anfr

Re: HA pair in Active/Active. Cannot deploy policy

Marvin Rhoads — Tue, 31 Dec 2024 08:37:39 GMT

I would go straight to TAC with this issue. When the system is broken in the way you describe, it is usually the result of some low level file / database corruption that is not usually something you can repair on your own.

Re: HA pair in Active/Active. Cannot deploy policy

kerande — Tue, 31 Dec 2024 11:49:57 GMT

Thank you. I have opened a TAC, I was just hoping that somebody might have a workaround while I wait for Cisco to get back to me. Unfortunately, it seems like my only real solution will be directly from Cisco. I appreciate the effort. Happy New Year!