topic Re: Firepower 1120 has wrong (falcon demo) license active in Network Security

Firepower 1120 has wrong (falcon demo) license active

VialisVVM — Fri, 04 Apr 2025 10:46:34 GMT

Hi all,

We bought 2 firewalls at the same time installed on both the same version ASA image. One of them is working fine. On the other FPR1120 we are nog able to use de ASDM gui. It turns out that the strong-encryption feature is nog activated on this FW and I can't get it active. Some more research at the License Admin site showed me that several 3DES-AES license actions failed and one action is processed. The succeeded action turns out to be a Falcon-DEMO license??.

Does anyone know how to de-register this license and then activate the 3DES-AES license?

Marcel Baas

Re: Firepower 1120 has wrong (falcon demo) license active

nspasov — Fri, 04 Apr 2025 12:51:35 GMT

Please take a look at this discussion: https://community.cisco.com/t5/network-security/install-strong-encryption-license-on-fp-1010-running-asa-code/m-p/4738910#M1095960

Also, here the CLI config guide for smart licensing: https://www.cisco.com/c/en/us/td/docs/security/asa/asa923/configuration/general/asa-923-general-config/intro-license-smart.html#ID-2149-0000029f

Thank you for rating helpful posts!

Re: Firepower 1120 has wrong (falcon demo) license active

VialisVVM — Fri, 18 Apr 2025 08:13:59 GMT

Hi nspasov,

Thanks for replying. Unfortunatly I already found these links and followed the steps as described without any luck. Then I found out the de service on the firewall has been expired. I guessed that doesn't help therefore we ordered a new service period for the FRP1120. This has been confirmed.

Just finishing doing the same sequence with the same result. Strong_encryption is still in active. Some info from the Firewall:

Smart Licensing is ENABLED

Registration:
Status: UNREGISTERED - REGISTRATION FAILED
Export-Controlled Functionality: NOT ALLOWED

License Authorization:
Status: No Licenses in Use

-----

entering the command: licence smart register idtoken <string> . results in the following:

FirewallKW# license smart register idtoken Yzg3YWU2NGItY2U2Zi00NDFiLTlmZjItNDg$
FirewallKW# SmartLic IPC Comm: Smart Licensing: sending SCH message...
SmartLic IPC Comm: Smart Licensing message: Setting event params
SmartLic IPC Comm: Smart Licensing message send: Firing event
sch_module: processing license(Smart License) Smart Licensing
sch_module: processing license(Smart License) Smart Licensing
sch_module: Dispatching license event.
sch_module: Message(1) license(Smart License) to https://tools.cisco.com/its/service/oddce/services/DDCEService queued for transmission
sch_module: Start dispatch rate limit timer
sch_module: Starting sch_dispatcher
sch_dispatcher: sch_dispatcher started
sch_dispatcher: [1] dispatching license message to https://tools.cisco.com/its/service/oddce/services/DDCEService
sch_dispatcher: Dispatch to destination https://tools.cisco.com/its/service/oddce/services/DDCEService
sch_module: Stop dispatch rate limit timer
sch_dispatcher: [1] Dispatch message(1) license to https://tools.cisco.com/its/service/oddce/services/DDCEService failed: INVALID_ADDRESS(17)
sch_dispatcher: Local error for https://tools.cisco.com/its/service/oddce/services/DDCEService, discarded (error INVALID_ADDRESS(17))
sch_dispatcher: No response to licensing message
sch_dispatcher: sch_sm_lic_event_cleanup_cb: Event Cleanup...

any Idea what might be wrong here?

Re: Firepower 1120 has wrong (falcon demo) license active

VialisVVM — Fri, 18 Apr 2025 10:16:41 GMT

Ok i moved one step onwards. Forgot to define the external DNS this time that explaines the "invallid address(17).

Solved that, then it complained about error (35), found something on http and https. changed the url to http. Then it complained about HTTP_FAILED(39). So that no good. Changed it back to the original https url

The outcome then is:

---

FirewallKW(cfg-call-home-profile)# destination address http https://tools.cis$
FirewallKW(cfg-call-home-profile)# cd
FirewallKW(cfg-call-home-profile)# end
FirewallKW# license smart register idtoken <string>
FirewallKW# SmartLic IPC Comm: Smart Licensing: sending SCH message...
SmartLic IPC Comm: Smart Licensing message: Setting event params
SmartLic IPC Comm: Smart Licensing message send: Firing event
sch_module: processing license(Smart License) Smart Licensing
sch_module: processing license(Smart License) Smart Licensing
sch_module: Dispatching license event.
sch_module: Message(11) license(Smart License) to https://tools.cisco.com/its/service/oddce/services/DDCEService queued for transmission
sch_module: Start dispatch rate limit timer
sch_dispatcher: [1] dispatching license message to https://tools.cisco.com/its/service/oddce/services/DDCEService
sch_dispatcher: Dispatch to destination https://tools.cisco.com/its/service/oddce/services/DDCEService
sch_module: Stop dispatch rate limit timer
sch_dispatcher: Opening dispatch channel: httpc/4/72.163.4.38/443/ssl/verify/sch//
sch_dispatcher: Opened dispatch channel: httpc/4/72.163.4.38/443/ssl/verify/sch//
sch_dispatcher: upload 4876 bytes
sch_dispatcher: http request to https://tools.cisco.com/its/service/oddce/services/DDCEService failed, rc -1
sch_dispatcher: [1] Dispatch message(11) license to https://tools.cisco.com/its/service/oddce/services/DDCEService failed: CONNECT_FAILED(35)
sch_dispatcher: No response to licensing message
sch_dispatcher: sch_sm_lic_event_cleanup_cb: Event Cleanup...

the solution i could find on the internet did not solve the issue. Any sugestions?

Re: Firepower 1120 has wrong (falcon demo) license active

nspasov — Fri, 18 Apr 2025 12:38:34 GMT

This will probably require the assistance of TAC but I can give it another try. Can you share the output from the following commands:

show version
show run license
show run call-home
show run dns
show run ntp
show run ssl
show run all ssl
show clock
show nameif
ping www.cisco.com

Thank you for rating helpful posts!

Re: Firepower 1120 has wrong (falcon demo) license active

VialisVVM — Fri, 18 Apr 2025 16:14:17 GMT

Hi nspasov,

To start with this, I appriciate the support you gave me sofar. To bad it didn's workout. Then the output of the commands:

show ver

Cisco Adaptive Security Appliance Software Version 9.16(2)14
SSP Operating System Version 2.10(1.182)
Device Manager Version 7.16(1)

Compiled on Wed 09-Feb-22 01:55 GMT by builders
System image file is "disk0:/installables/switch/fxos-k8-fp1k-lfbff.2.10.1.182.SPA"
Config file at boot was "startup-config"

FirewallKW up 7 hours 58 mins

Hardware: FPR-1120, 14336 MB RAM, CPU Atom C3000 series 2000 MHz, 1 CPU (12 cores)

Encryption hardware device : Cisco FP Crypto on-board accelerator (revision 0x11)
Driver version : 4.11.0
Number of accelerators: 6

1: Int: Internal-Data0/0 : address is 00a0.c900.0002, irq 10
3: Int: Not licensed : irq 0
4: Ext: Management1/1 : address is 6887.c6f0.9981, irq 0
5: Int: Internal-Data1/1 : address is 0000.0100.0001, irq 0

License mode: Smart Licensing

Licensed features for this platform:
<--- More ---> Maximum Physical Interfaces : Unlimited
Maximum VLANs : 512
Inside Hosts : Unlimited
Failover : Active/Active
Encryption-DES : Enabled
Encryption-3DES-AES : Disabled
Security Contexts : 2
Carrier : Disabled
AnyConnect Premium Peers : 150
AnyConnect Essentials : Disabled
Other VPN Peers : 150
Total VPN Peers : 150
AnyConnect for Mobile : Enabled
AnyConnect for Cisco VPN Phone : Enabled
Advanced Endpoint Assessment : Enabled
Shared License : Disabled
Total TLS Proxy Sessions : 320
Cluster : Disabled

Serial Number: JAD25420M8F
Configuration register is 0x1
Configuration last modified by mbaas at 15:05:35.896 CEST Fri Apr 18 2025

show running-config license

Empty!!!

show run call-home
service call-home
no call-home reporting anonymous
call-home
contact-email-addr leveranciers.ict@vialis.nl
profile CiscoTAC-1
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email callhome@cisco.com
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
profile License
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination transport-method http

show run dns

dns domain-lookup management
DNS server-group DefaultDNS
name-server 100.100.81.10 management
domain-name bcdh.local

comment: At this moment I'm not on site anymore there for I had to remove the following: "name-server 8.8.8.8 management". I added this one because the local DNS only supports local translations. As a result the "ping www.cisco.com " will not work. However I tried a "ping tools.cisco.com" when I was on site and that replied the moment the google dns was active and I added the following static route: "route 0.0.0.0 0.0.0.0 management".

show run ntp

ntp server 100.100.81.10 source management prefer

show run ssl

ssl server-version tlsv1.2 dtlsv1.2
ssl client-version tlsv1.2

show run all ssl

ssl server-version tlsv1.2 dtlsv1.2
ssl client-version tlsv1.2
ssl cipher default low
ssl cipher tlsv1 low
ssl cipher tlsv1.1 low
ssl cipher tlsv1.2 low
ssl cipher dtlsv1 low
ssl cipher dtlsv1.2 low
ssl dh-group group14
ssl ecdh-group group19
ssl certificate-authentication fca-timeout 2

sho clo

17:50:54.126 CEST Fri Apr 18 2025

sho nameif

Interface Name Security
Ethernet1/1 outside 0
Ethernet1/2 inside 50
Management1/1 management 100

ping www.cisco.com

As commented the ping doesn't work. When the FW is active inside the local network. We have to take out the possibility of a connection to the internet. In that case I can reach it from the outside using a jump-server construction but i won't be able to reach the internet from within the FW that has the issue. Te be clear. This morning i was on site and had the FW connected to the internet. Using the mentioned extra lines earlier.

Hope the results point to some direction. Once again thx for the assistance,

Hoping to get some responds

Marcel

Re: Firepower 1120 has wrong (falcon demo) license active

Marvin Rhoads — Mon, 21 Apr 2025 15:46:51 GMT

When you register an ASA with Smart Licensing (applies for ASAv or ASA running on Firepower or Cisco Secure Firewall hardware), the management interface needs to be able to resolve FQDNs and access the Internet. (The exception is if you have a local CSSM satellite server or have a Permanent License Reservation (PLR).)

Re: Firepower 1120 has wrong (falcon demo) license active

nspasov — Mon, 21 Apr 2025 19:37:31 GMT

If you want to use the management interface for doing the license registration and you have DNS working then it appears that you are only missing the command "source-interface management" under the "call-home" configuration. Add this command and then try again to register. However, if this device is air-gapped (No internet access), you will eventually run into the same problem as the device periodically calls home. You can check this with the "show license summary" commend. Below is the output from my lab ASAv:

NS-ASAv-01# show license summary

Smart Licensing is ENABLED

Registration:
Status: REGISTERED
Smart Account: ********
Virtual Account: Neno Spasov
Export-Controlled Functionality: ALLOWED
Last Renewal Attempt: None
Next Renewal Attempt: Oct 15 2025 18:47:55 UTC

License Authorization:
Status: OUT OF COMPLIANCE
Last Communication Attempt: SUCCEEDED
Next Communication Attempt: Apr 21 2025 18:48:02 UTC

Thus, you will need to either get a permanent license (PLR), a satellite server or enable the device with internet access.

Thank you for rating helpful posts!

Re: Firepower 1120 has wrong (falcon demo) license active

VialisVVM — Wed, 23 Apr 2025 20:24:12 GMT

Hi Marvin,

Thanks for the responds. Trying to get te licence correct the internet was accesseble and the FQDN could be solved (I tried to ping several websites incl. "tools.cisco.com") during the process.

Unfortunatly I could not leave the FW that way because the environment does'nt allow that so I had change the config back. To overcome this issue. I took the FW temperary out of the room and have it now connected to the in internet when needed.

Tried it again today with no luck :(.

Re: Firepower 1120 has wrong (falcon demo) license active

VialisVVM — Wed, 23 Apr 2025 20:30:07 GMT

Hi nspasov,

I moved the FW out of the environment. This means that the FW can be connected to the Inet as long as needed. I'm busy with another project. Tomorrow evening I will continiue with the FW. Let you know what I find

Re: Firepower 1120 has wrong (falcon demo) license active

VialisVVM — Thu, 24 Apr 2025 20:21:15 GMT

Just retried the license that was bought. Stange thing is that I still can't find the SN of the FW in the list on the Cisco license site "https://software.cisco.com/software/smart-licensing/inventory".

Part of the config

show version

Cisco Adaptive Security Appliance Software Version 9.16(2)14
SSP Operating System Version 2.10(1.182)
Device Manager Version 7.16(1)

Compiled on Wed 09-Feb-22 01:55 GMT by builders
System image file is "disk0:/installables/switch/fxos-k8-fp1k-lfbff.2.10.1.182.SPA"
Config file at boot was "startup-config"

FirewallKW up 5 mins 42 secs

Hardware: FPR-1120, 14336 MB RAM, CPU Atom C3000 series 2000 MHz, 1 CPU (12 cores)

Encryption hardware device : Cisco FP Crypto on-board accelerator (revision 0x11)
Driver version : 4.11.0
Number of accelerators: 6

License mode: Smart Licensing

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 512
Inside Hosts : Unlimited
Failover : Active/Active
Encryption-DES : Enabled
Encryption-3DES-AES : Disabled
Security Contexts : 2
Carrier : Disabled
AnyConnect Premium Peers : 150
AnyConnect Essentials : Disabled
Other VPN Peers : 150
Total VPN Peers : 150
AnyConnect for Mobile : Enabled
AnyConnect for Cisco VPN Phone : Enabled
Advanced Endpoint Assessment : Enabled
Shared License : Disabled
Total TLS Proxy Sessions : 320
Cluster : Disabled

Serial Number: JAD25420M8F
Configuration register is 0x1
Configuration has not been modified since last system restart.

show run license
feature tier standard

FirewallKW(config-smart-lic)# feature strong-encryption
ERROR: Please acquire a valid feature tier entitlement before configuring add-on entitlements.
FirewallKW(config-smart-lic)#

show run call-home

Current Smart Call-Home settings:
Smart Call-Home feature : enable
Smart Call-Home message's from address: Not yet set up
Smart Call-Home message's reply-to address: Not yet set up
contact person's email address: leveranciers.ict@vialis.nl
contact person's phone: Not yet set up
street address: Not yet set up
customer ID: Not yet set up
contract ID: Not yet set up
site ID: Not yet set up
Mail-server: Not yet set up
Http-proxy: Not yet set up
Rate-limit: 10 message(s) per minute
Event-queue-size: 10

Available alert groups:
Keyword State
------------------------ -------
syslog Enable
diagnostic Enable
environment Enable
inventory Enable
configuration Enable
snapshot Enable
threat Enable
telemetry Enable
license Enable

Profiles:
Profile Name: CiscoTAC-1
Profile Name: License

show run dns

dns domain-lookup test
dns domain-lookup management
DNS server-group DefaultDNS
name-server 100.100.81.10 management
name-server 8.8.8.8 test
domain-name bcdh.local

show run ntp
ntp server 100.100.81.10 source management prefer

show run ssl
ssl client-version tlsv1.2

show run all ssl
ssl server-version tlsv1 dtlsv1
ssl client-version tlsv1.2
ssl cipher default low
ssl cipher tlsv1 low
ssl cipher tlsv1.1 low
ssl cipher tlsv1.2 low
ssl cipher dtlsv1 low
ssl cipher dtlsv1.2 low
ssl dh-group group14
ssl ecdh-group group19
ssl certificate-authentication fca-timeout 2

show clock
22:17:33.119 CEST Thu Apr 24 2025

show nameif
Interface Name Security
Ethernet1/1 outside 0
Ethernet1/2 inside 50
Ethernet1/8 test 100
Management1/1 management 100

ping www.cisco.com
Sending 5, 100-byte ICMP Echos to 184.30.156.122, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/8/10 ms

Then I switched on a couple of debug options:

debug call-home smart-licensing all
debug license agent all
debug http

and run

license smart register idtoken xxxxxxxxx

The respond is:

Smart Agent: Thu Apr 24 21:49:54.465 --380885248-getInfo client side call for type 4
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-ENABLE_ON_INIT attribute is not used for this platform
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-AuthTime Status NOT STARTED NOT STARTED
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-Found value for item 27
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-Locking Job SASAuthorizationRenewJob
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-UnLocking Job SASAuthorizationRenewJob
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-Locking Job SASAuthorizationRenewJob
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-The Job SASAuthorizationRenewJob has Flags 0x00
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-Job SASAuthorizationRenewJob has not been attached
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-UnLocking Job SASAuthorizationRenewJob
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-Locking Job SASAuthorizationExpireJob
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-UnLocking Job SASAuthorizationExpireJob
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-Locking Job SASAuthorizationExpireJob
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-The Job SASAuthorizationExpireJob has Flags 0x00
Smart Agent: Thu Apr 24 21:49:54.465 -SASRcvWQWrk2-Job SASAuthorizationExpireJob has not been attached
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-UnLocking Job SASAuthorizationExpireJob
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Get Num Ent In Use: numEntitlementsInList[1]
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Get Num Ent In Use: next_id[1]
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Found value for item 21
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Returning NULL for item 17
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Returning NULL for item 18
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Locking Job SASIDCertRenewalJob
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-UnLocking Job SASIDCertRenewalJob
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Locking Job SASIDCertRenewalJob
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-The Job SASIDCertRenewalJob has Flags 0x00
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Job SASIDCertRenewalJob has not been attached
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-UnLocking Job SASIDCertRenewalJob
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Returning NULL for item 24
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Locking Job SASIDCertExpirationJob
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-UnLocking Job SASIDCertExpirationJob
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Locking Job SASIDCertExpirationJob
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-The Job SASIDCertExpirationJob has Flags 0x00
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Job SASIDCertExpirationJob has not been attached
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-UnLocking Job SASIDCertExpirationJob
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Returning NULL for item 51
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-exportStatus=0, ecRet=0, esValid=0, tsEc= 0, tsPLREc=0, res=0, resType=0
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-Returning NULL for item 51
Smart Agent: Thu Apr 24 21:49:54.466 -SASRcvWQWrk2-exportStatus=0, ecRet=0, esValid=0, tsEc= 0, tsPLREc=0, res=0, resType=0
Smart Agent: Thu Apr 24 21:49:54.466 --380885248-About to Free getInfo Response
Smart Agent: Thu Apr 24 21:49:54.512 -SASRcvWQWrk2-Starting register ID token: YWV...
Smart Agent: Thu Apr 24 21:49:54.512 -SASRcvWQWrk2-SAIdTokenRegisterSchedulerJob: expirySeconds=1
FirewallKW# Smart Agent: Thu Apr 24 21:49:54.512 -SASRcvWQWrk2-Item 19 Value is unchanged 1745523848
Smart Agent: Thu Apr 24 21:49:54.512 -SASRcvWQWrk2-Item 20 Value is unchanged 3
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-Item 21 Value is unchanged
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-no change for TS queueup for file sanosync.info
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-no change for TS queueup for file sapiidsync.info
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-no change for TS queueup for file satimeflagsync.info
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-no change for TS queueup for file currentRUMReports.rum
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-Locking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-About to Attach SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-Job 1023 SASRegisterExpirationJob, Matching 1023 SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-Job 1023 SASRegisterExpirationJob, Matching 1023 SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-Job 1023 SASRegisterExpirationJob, Matching 1023 SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-Attach job SASRegisterExpirationJob to XDM Leaf 0x7f9ca4001b70
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-Successfully start job SASRegisterExpirationJob timer leaf 1 Seconds
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-UnLocking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:54.513 -SASRcvWQWrk2-entReqReset flag is set True on this platform
Smart Agent: Thu Apr 24 21:49:54.514 -SASRcvWQWrk2-2025-04-24 21:49:54.514 CEST SAEVT_REGISTER_START idToken="xxxxxxxx" force="False"
Smart Agent: Thu Apr 24 21:49:54.514 -SASRcvWQWrk2-Smart Agent: Thu Apr 24 21:49:54.514 --389277952-Admin Client side getting Server Response Success
Smart Agent: Thu Apr 24 21:49:55.514 -SAMsgThread-Job 1023 SASRegisterExpirationJob, Matching 1023 SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.514 -SAMsgThread-Find the Job for removal 0x7f9cc0002bf0
Smart Agent: Thu Apr 24 21:49:55.514 -SAMsgThread-Removinging Job SASRegisterExpirationJob 0x7f9cc0002590, leaf 0x7f9ca4001b70
Smart Agent: Thu Apr 24 21:49:55.514 -SAMsgThread-Locking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.514 -SAMsgThread-UnLocking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.514 -SAMsgThread-Locking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.514 -SAMsgThread-Attaching Job SASRegisterExpirationJob to Exec Queue Head
Smart Agent: Thu Apr 24 21:49:55.514 -SAMsgThread-UnLocking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.515 -SAMsgThread-Executing from Queue, Job SASRegisterExpirationJob (11)
Smart Agent: Thu Apr 24 21:49:55.515 -SAMsgThread-Setting SASRegisterExpirationJob IN PROGRESS False to True
Smart Agent: Thu Apr 24 21:49:55.515 -SAMsgThread-Locking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.515 -SAMsgThread-UnLocking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.515 -SAMsgThread-Starting IdTokenRegister: state=unidentified, force=0
Smart Agent: Thu Apr 24 21:49:55.515 -SAMsgThread-Locking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.515 -SAMsgThread-Find the Job for removal (nil)
Smart Agent: Thu Apr 24 21:49:55.515 -SAMsgThread-scheduler job not found
Smart Agent: Thu Apr 24 21:49:55.515 -SAMsgThread-UnLocking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.515 -SAMsgThread-CheckCommInit SysInitFlag 1 SysInitEvent 1 CryptoInit 1 CommInit 1
Smart Agent: Thu Apr 24 21:49:55.515 -SAMsgThread-Found value for item 12
Smart Agent: Thu Apr 24 21:49:55.634 -SAMsgThread-SmartAgentPICryptoGetCSR : returnStatus (0)
Smart Agent: Thu Apr 24 21:49:55.634 -SAMsgThread-Item 12 replaced with new value Len 1704 1704
Smart Agent: Thu Apr 24 21:49:55.634 -SAMsgThread-Stored str value of item 0x5555cb5e1310 12 to memory
Smart Agent: Thu Apr 24 21:49:55.634 -SAMsgThread-TS Group write TrustedStore Group has unchanged elements
Smart Agent: Thu Apr 24 21:49:55.634 -SAMsgThread-Returning NULL for item 51
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-CertMgmtGetPrivateKey: use current privateKey
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-Found value for item 12
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-Send msgCnt 2 message type REGISTRATION [1] Piid='nullPtr' len=1872
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-Smart Agent Communication Send messageType[REGISTRATION]
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-================request from Smart Agent
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-{"request":"{\"header\":{\"request_type\":\"REGISTRATION\",\"sudi\":{\"udi_pid\":\"FPR-1120\",\"udi_serial_number\":\"JAD25420M8F\"},\"version\":\"1.3\",\"locale\"
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-:\"en_US.UTF-8\",\"connect_info\":{\"name\":\"C_agent\",\"version\":\"4.11.3_rel/25\",\"production\":true,\"capabilities\":[\"UTILITY\",\"DLC\",\"AppHA\",\"MULTITI
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-ER\",\"EXPORT_2\",\"OK_TRY_AGAIN\"]}},\"request_data\":\"{\\\"mode\\\":\\\"PREPAID\\\",\\\"software_tag_identifier\\\":\\\"regid.2014-07.com.cisco.ASA,1.0_536ec4ff
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread--199b-4373-a1ba-db3f7144768c\\\",\\\"sudi\\\":{\\\"udi_pid\\\":\\\"FPR-1120\\\",\\\"udi_serial_number\\\":\\\"JAD25420M8F\\\"},\\\"hostname\\\":\\\"FirewallKW\\\",
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-\\\"timestamp\\\":\\\"1745524195635\\\",\\\"csr\\\":\\\"MIICfTCCAWUCAQAwODE2MDQGA1UEAwwtMmEwZDBjYTFjOTI4YTI3MTFjOWU2MjA1NDhhZmYzMDg0MjU2MGYyODo6MSwyMIIBIjANBgkqhki
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-G9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgnClQ+a2G8TUwR59+E2jI1A4CGJ9RDvHVfNm83Cji4gJxMTHgklIsE0hZWcxxKwwz59LL28uzLx/xsfiBsYfnrmFm2dShrL1z1fLndk2W3oDV7sPLjY7NFl95SQGyrLPBKq6z
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-bIzNi5BgiVkAu5OaZB1jau1Ls2YN8eM/IM6BYXZrGlJp1weeSHEar0daln1npq59+7qvEYzyjtP3i3yjSvjHwVuiE68WEP29C8AirELejm4JvCLrxVkfHwW8/RXIQ7fLZG4mBoAB70p609NzgNw4aTaGFlBMfpiqMql
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-Cjd9l79CvrNWPjal46RpSgE+EMrY01ScJj5130jxXaZYwIDAQABoAAwDQYJKoZIhvcNAQELBQADggEBAG8cERKwmpTCvYX4DgE1jb9ny7lbyeWdhgPLHVvS9cEMalOFWX+vGbRRUsjryO/AG1DQztHV5XfBwxohS/22
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-ZlvnSH58Gqy2qj7qX/xqbm1pYrqYxH0aZeZD2xYS0TVMfyom11wFCGCOKDkmaEhpKSrSZ3oOBvkaVJEidyUpYCujLBsQFR1zGcu7bhRyD/5qEmzecuMWNYE0ULVeNguizUDWoeKZT5Qvqmgn701Ot+gMsfME2gJbW5E
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-8i41XNUb+P1wZSSylENLbvLwnm8k6SDG9AxS7XzALSVJdjSeG2mJ1C0n7w9aFpSHwITSeI7f/WrNGUC5xQM87ef63+m6AARM=\\\",\\\"token\\\":\\\"YWVjYTA1ZTctNDcwZC00YWUwLTk2NmItYzE4ZmVkOWN
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-hZTQ1LTE3NDcyMDM4%0AMjUzMzR8ZFhTVlJNdG9aMHBoTHdhdkJjQS9LZUcxd25mNklnTTNqTmsrQTNQ%0AR2NVVT0%3D%0A\\\",\\\"force\\\":false,\\\"nonce\\\":\\\"1845289754430951508\\\",
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-\\\"additional_data\\\" :[]}\"}","signature":{"type":"SHA256"},"credential":{}}
Smart Agent: Thu Apr 24 21:49:55.635 -SAMsgThread-========================================
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-No Storage Content
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-========== SENDING MESSAGE ==========
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-Transport[Callhome] URL['nullPtr']
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-{"request":"{\"header\":{\"request_type\":\"REGISTRATION\",\"sudi\":{\"udi_pid\":\"FPR-1120\",\"udi_serial_number\":\"JAD25420M8F\"},\"version\":\"1.3\",\"locale\"
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-:\"en_US.UTF-8\",\"connect_info\":{\"name\":\"C_agent\",\"version\":\"4.11.3_rel/25\",\"production\":true,\"capabilities\":[\"UTILITY\",\"DLC\",\"AppHA\",\"MULTITI
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-ER\",\"EXPORT_2\",\"OK_TRY_AGAIN\"]}},\"request_data\":\"{\\\"mode\\\":\\\"PREPAID\\\",\\\"software_tag_identifier\\\":\\\"regid.2014-07.com.cisco.ASA,1.0_536ec4ff
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread--199b-4373-a1ba-db3f7144768c\\\",\\\"sudi\\\":{\\\"udi_pid\\\":\\\"FPR-1120\\\",\\\"udi_serial_number\\\":\\\"JAD25420M8F\\\"},\\\"hostname\\\":\\\"FirewallKW\\\",
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-\\\"timestamp\\\":\\\"1745524195635\\\",\\\"csr\\\":\\\"MIICfTCCAWUCAQAwODE2MDQGA1UEAwwtMmEwZDBjYTFjOTI4YTI3MTFjOWU2MjA1NDhhZmYzMDg0MjU2MGYyODo6MSwyMIIBIjANBgkqhki
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-G9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgnClQ+a2G8TUwR59+E2jI1A4CGJ9RDvHVfNm83Cji4gJxMTHgklIsE0hZWcxxKwwz59LL28uzLx/xsfiBsYfnrmFm2dShrL1z1fLndk2W3oDV7sPLjY7NFl95SQGyrLPBKq6z
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-bIzNi5BgiVkAu5OaZB1jau1Ls2YN8eM/IM6BYXZrGlJp1weeSHEar0daln1npq59+7qvEYzyjtP3i3yjSvjHwVuiE68WEP29C8AirELejm4JvCLrxVkfHwW8/RXIQ7fLZG4mBoAB70p609NzgNw4aTaGFlBMfpiqMql
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-Cjd9l79CvrNWPjal46RpSgE+EMrY01ScJj5130jxXaZYwIDAQABoAAwDQYJKoZIhvcNAQELBQADggEBAG8cERKwmpTCvYX4DgE1jb9ny7lbyeWdhgPLHVvS9cEMalOFWX+vGbRRUsjryO/AG1DQztHV5XfBwxohS/22
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-ZlvnSH58Gqy2qj7qX/xqbm1pYrqYxH0aZeZD2xYS0TVMfyom11wFCGCOKDkmaEhpKSrSZ3oOBvkaVJEidyUpYCujLBsQFR1zGcu7bhRyD/5qEmzecuMWNYE0ULVeNguizUDWoeKZT5Qvqmgn701Ot+gMsfME2gJbW5E
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-8i41XNUb+P1wZSSylENLbvLwnm8k6SDG9AxS7XzALSVJdjSeG2mJ1C0n7w9aFpSHwITSeI7f/WrNGUC5xQM87ef63+m6AARM=\\\",\\\"token\\\":\\\"YWVjYTA1ZTctNDcwZC00YWUwLTk2NmItYzE4ZmVkOWN
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-hZTQ1LTE3NDcyMDM4%0AMjUzMzR8ZFhTVlJNdG9aMHBoTHdhdkJjQS9LZUcxd25mNklnTTNqTmsrQTNQ%0AR2NVVT0%3D%0A\\\",\\\"force\\\":false,\\\"nonce\\\":\\\"1845289754430951508\\\",
Smart Agent: Thu Apr 24 21:49:55.636 -SAMsgThread-\\\"additional_data\\\" :[]}\"}","signature":{"type":"SHA256"},"credential":{}}
SmartLic IPC Comm: Smart Licensing: sending SCH message...
SmartLic IPC Comm: Smart Licensing message: Setting event params
SmartLic IPC Comm: Smart Licensing message send: Firing event
sch_module: processing license(Smart License) Smart Licensing
sch_module: processing license(Smart License) Smart Licensing
sch_module: Dispatching license event.
sch_module: Message(7) license(Smart License) to https://tools.cisco.com/its/service/oddce/services/DDCEService queued for transmission
sch_module: Start dispatch rate limit timer
sch_dispatcher: [2] dispatching license message to https://tools.cisco.com/its/service/oddce/services/DDCEService
sch_dispatcher: Dispatch to destination https://tools.cisco.com/its/service/oddce/services/DDCEService
sch_dispatcher: Opening dispatch channel: httpc/4/72.163.4.38/443/ssl/verify/sch//
sch_dispatcher: Opened dispatch channel: httpc/4/72.163.4.38/443/ssl/verify/sch//
sch_dispatcher: upload 4874 bytes
Proxy server specified:
Opening http channel: tcp/sch/ssl/client/verify/4/72.163.4.38/443
channel write fail: POST /its/service/oddce/services/DDCEService HTTP/1.0
Content-Length: 4874
Content-Type: application/soap+xml; charset=utf-8
SOAPAction: "urn:ddce"
Connection: close
Host: tools.cisco.com:443

Error in send_request.
sch_dispatcher: http request to https://tools.cisco.com/its/service/oddce/services/DDCEService failed, rc -1
sch_dispatcher: [2] Dispatch message(7) license to https://tools.cisco.com/its/service/oddce/services/DDCEService failed: CONNECT_FAILED(35)
sch_dispatcher: No response to licensing message
sch_dispatcher: sch_sm_lic_event_cleanup_cb: Event Cleanup...
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread-========== RESPONSE MESSAGE ==========
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread-Status 32 [Communication message send error] Error['nullPtr']
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread-'nullPtr'
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread-No Storage Content
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread-Failed to send message to Cisco: empty
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread- Rval Communication message send error
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread-TS Group write TrustedStore Group has unchanged elements retVal is 62
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread-TS Group write TrustedStore Group has unchanged elements retVal is 62
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread-Item 21 Value is unchanged
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread-no change for TS queueup for file sanosync.info
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread-erase 1, force 1, anyChgd 1
Smart Agent: Thu Apr 24 21:49:55.780 -SAMsgThread-Queueing Up TS Group sapiidsync.info 0x7f9cc0001d00
Smart Agent: Thu Apr 24 21:49:55.780 -SAStorage-Initial TS Queue size 1 rc NoError(0)
Smart Agent: Thu Apr 24 21:49:55.780 -SAStorage-DeQueueing a TS Group sapiidsync.data
Smart Agent: Thu Apr 24 21:49:55.780 -SAStorage-wrkstr: allocating 1 bytes
Smart Agent: Thu Apr 24 21:49:55.780 -SAStorage-Writing TS: ChkPt SmartAgentHaMethodInvalid, tsErasedOccurred False, numTsPaths 0
Smart Agent: Thu Apr 24 21:49:55.781 -SAStorage-Writing to the Path <TS>/sapiidsync.data
Smart Agent: Thu Apr 24 21:49:55.781 -SAStorage-Attempt to obtain Write Lock.
Smart Agent: Thu Apr 24 21:49:55.781 -SAStorage-Attempt to release Write Lock.
Smart Agent: Thu Apr 24 21:49:55.781 -SAStorage-Get Sys Data from PI The requested operation is not supported
Smart Agent: Thu Apr 24 21:49:55.781 -SAStorage-UDI Retrieval returned The requested operation is not supported
Smart Agent: Thu Apr 24 21:49:55.781 -SAMsgThread-erase 1, force 1, anyChgd 1
Smart Agent: Thu Apr 24 21:49:55.782 -SAMsgThread-Queueing Up TS Group satimeflagsync.info 0x7f9cc0001d00
Smart Agent: Thu Apr 24 21:49:55.782 -SAStorage-Initial TS Queue size 1 rc NoError(0)
Smart Agent: Thu Apr 24 21:49:55.782 -SAStorage-DeQueueing a TS Group satimeflagsync.data
Smart Agent: Thu Apr 24 21:49:55.782 -SAStorage-wrkstr: allocating 1 bytes
Smart Agent: Thu Apr 24 21:49:55.782 -SAStorage-Writing TS: ChkPt SmartAgentHaMethodInvalid, tsErasedOccurred False, numTsPaths 0
Smart Agent: Thu Apr 24 21:49:55.782 -SAStorage-Writing to the Path <TS>/satimeflagsync.data
Smart Agent: Thu Apr 24 21:49:55.782 -SAStorage-Attempt to obtain Write Lock.
Smart Agent: Thu Apr 24 21:49:55.782 -SAStorage-Attempt to release Write Lock.
Smart Agent: Thu Apr 24 21:49:55.782 -SAStorage-Get Sys Data from PI The requested operation is not supported
Smart Agent: Thu Apr 24 21:49:55.782 -SAStorage-UDI Retrieval returned The requested operation is not supported
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-no change for TS queueup for file currentRUMReports.rum
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-Global Notif send: type=SmartAgentNotifyRegisterFailed (3),
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-Event Log for Global Notif: Notification Type SmartAgentNotifyRegisterFailed
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-Event Log for Global Notif: Event Log Type SAEVT_REGISTER_STATUS
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-Global Notif send: type=SmartAgentNotifyCommFailure (11),
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-Event Log for Global Notif: Notification Type SmartAgentNotifyCommFailure
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-Event Log for Global Notif: Event Log Type SAEVT_COMM_FAIL
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-2025-04-24 21:49:55.783 CEST SAEVT_COMM_FAIL error="Communication message send error"
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-No Storage Content
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-Failed to send registration message to Cisco: Communication message send error
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-2025-04-24 21:49:55.784 CEST SAEVT_REGISTER_STATUS msgStatus="COMMUNICATION_FAILURE" retrySeconds="1132" error="Communication message send error"
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-Registration error: Communication message send error, retry... expirySeconds=1132
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-SAIdTokenRegisterSchedulerJob: expirySeconds=1132
Smart Agent: Thu Apr 24 21:49:55.783 -SAMsgThread-Item 19 Value is unchanged 1745524195
Smart Agent: Thu Apr 24 21:49:55.784 -SAMsgThread-TS Group write TrustedStore Group has unchanged elements retVal is 62
Smart Agent: Thu Apr 24 21:49:55.784 -SAMsgThread-Item 21 Value is unchanged
Smart Agent: Thu Apr 24 21:49:55.784 -SAMsgThread-no change for TS queueup for file sanosync.info
Smart Agent: Thu Apr 24 21:49:55.784 -SAMsgThread-no change for TS queueup for file sapiidsync.info
Smart Agent: Thu Apr 24 21:49:55.784 -SAMsgThread-erase 1, force 1, anyChgd 1
Smart Agent: Thu Apr 24 21:49:55.784 -SAMsgThread-Queueing Up TS Group satimeflagsync.info 0x7f9cc00053b0
Smart Agent: Thu Apr 24 21:49:55.784 -SAStorage-Initial TS Queue size 1 rc NoError(0)
Smart Agent: Thu Apr 24 21:49:55.784 -SAStorage-DeQueueing a TS Group satimeflagsync.data
Smart Agent: Thu Apr 24 21:49:55.784 -SAStorage-wrkstr: allocating 1 bytes
Smart Agent: Thu Apr 24 21:49:55.784 -SAStorage-Writing TS: ChkPt SmartAgentHaMethodInvalid, tsErasedOccurred False, numTsPaths 0
Smart Agent: Thu Apr 24 21:49:55.784 -SAStorage-Writing to the Path <TS>/satimeflagsync.data
Smart Agent: Thu Apr 24 21:49:55.784 -SAStorage-Attempt to obtain Write Lock.
Smart Agent: Thu Apr 24 21:49:55.785 -SAStorage-Attempt to release Write Lock.
Smart Agent: Thu Apr 24 21:49:55.785 -SAStorage-Get Sys Data from PI The requested operation is not supported
Smart Agent: Thu Apr 24 21:49:55.785 -SAStorage-UDI Retrieval returned The requested operation is not supported
Smart Agent: Thu Apr 24 21:49:55.785 -SAMsgThread-no change for TS queueup for file currentRUMReports.rum
Smart Agent: Thu Apr 24 21:49:55.785 -SAMsgThread-Locking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.785 -SAMsgThread-About to Attach SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.785 -SAMsgThread-Tenant 1023 Job SASRegisterExpirationJob, attached flag set, but not in list
Smart Agent: Thu Apr 24 21:49:55.785 -SAMsgThread-JobFlag 0x115 not having the right prerequeset 0x02 for 0x20
Smart Agent: Thu Apr 24 21:49:55.785 -SAMsgThread-Attach job SASRegisterExpirationJob to XDM Leaf 0x7f9cc0001ac0
Smart Agent: Thu Apr 24 21:49:55.785 -SAMsgThread-Successfully start job SASRegisterExpirationJob timer leaf 1132 Seconds
Smart Agent: Thu Apr 24 21:49:55.785 -SAMsgThread-UnLocking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.785 -SAMsgThread-2025-04-24 21:49:55.786 CEST SAEVT_REGISTER_RETRY idToken="xxxxxxxx" force="False"
Smart Agent: Thu Apr 24 21:49:55.785 -SAMsgThread-
Smart Agent: Thu Apr 24 21:49:55.786 -SAMsgThread-Locking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.786 -SAMsgThread-UnLocking Job SASRegisterExpirationJob
Smart Agent: Thu Apr 24 21:49:55.786 -SAMsgThread-nextQ 0x7f9cc0001bf0, for job SASRegisterExpirationJob jobData 0x7f9cc00049d0, tcId 1023
Smart Agent: Thu Apr 24 21:49:55.786 -SAMsgThread-Setting SASRegisterExpirationJob IN PROGRESS True to False
Smart Agent: Thu Apr 24 21:49:55.786 -SACRcvWQWrk3-Global Notification of type 3 received
Smart Agent: Thu Apr 24 21:49:55.786 -SACRcvWQWrk3-Notification type 3 going to 0x5555cb5b2a00 calling 0x5555caee8fe0 then (nil)
Smart Agent: Thu Apr 24 21:49:55.786 -SACRcvWQWrk3-Global Notification of type 11 received
Smart Agent: Thu Apr 24 21:49:55.786 -SACRcvWQWrk3-Notification type 11 going to 0x5555cb5b2a00 calling 0x5555caee8fe0 then (nil)
sch_module: Stop dispatch rate limit timer

It responds with an error in the send_request. I do not see what might be wrong

Re: Firepower 1120 has wrong (falcon demo) license active

nspasov — Fri, 25 Apr 2025 00:24:22 GMT

I do not see the command "source-interface management" under "call-home" that I suggested in my previous response. If you are using the mgmt interface for internet access, then this command is required. Below is a snip it from the ASAv in my lab that uses the mgmt interface to register:

NS-ASAv-01# show run call-home
no call-home reporting anonymous
call-home
source-interface management
profile License
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination transport-method http

Thank you for rating helpful posts!

Re: Firepower 1120 has wrong (falcon demo) license active

VialisVVM — Fri, 25 Apr 2025 10:46:10 GMT

Hi nspasov,

Appologies, don't know what happened there. However since I use the "test" interface to connect the FW to the local network en the internet. I guess the command should be:

source-interface test

that goes with:

the configured interface:

Ethernet1/8 test 100

the default route:

S* name-server 8.8.8.8 test0.0.0.0 0.0.0.0 [1/0] via 192.168.10.1, test

The domain-lookup:

dns domain-lookup test

The name-server:

name-server 8.8.8.8 test

show run call-home

Now shows:

service call-home
no call-home reporting anonymous
call-home
contact-email-addr leveranciers.ict@vialis.nl
source-interface test
profile CiscoTAC-1
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email callhome@cisco.com
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
profile License
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination transport-method http

Unfortunatly the responds is the same as before. I am going to wipe the complete config from the FW setup the minimal basics and try it from there. I'll let you know what te result will be

Re: Firepower 1120 has wrong (falcon demo) license active

nspasov — Fri, 25 Apr 2025 12:38:07 GMT

I think it might be best to engage Cisco TAC at this point. However, a few more things to try:

Confirm that the date, time and NTP are set correctly with: show clock, show ntp status
Confirm that the "test" interface is being used with ping test www.cisco.com
Upgrade the software to the current gold star release: 9.20.3 -> Then try registration again
Restore SSL configuration by: no ssl client-version tlsv1.2 -> Then try registration again

Thank you for rating helpful posts!

Re: Firepower 1120 has wrong (falcon demo) license active

VialisVVM — Fri, 25 Apr 2025 13:29:34 GMT

I finaly fixed it.

I resetted to factory default using the option in the romon. Then only provided a basic config to be able to use the ADSM and... voila I coudl login using ADSM. Next configured the dns and the gateway proprely and went activating the smartlicense with a valid ID-token (used that one before but did'nt woirk out then). Eureka, the strong-encryption is activated succesfully.

Licensed features for this platform:
Maximum Physical Interfaces : Unlimited
Maximum VLANs : 512
Inside Hosts : Unlimited
Failover : Active/Active
Encryption-DES : Enabled
Encryption-3DES-AES : Enabled
Security Contexts : 4
Carrier : Disabled
AnyConnect Premium Peers : 150
AnyConnect Essentials : Disabled
Other VPN Peers : 150
Total VPN Peers : 150
AnyConnect for Mobile : Enabled
AnyConnect for Cisco VPN Phone : Enabled
Advanced Endpoint Assessment : Enabled
Shared License : Disabled
Total TLS Proxy Sessions : 320
Cluster : Disabled

Only need to reload the config now :).

One for the record I guess. If one has, for some reason, activated a FALCON demo license on an ASA.

- Backup de config.

- Wipe it to factory default using romon.

- Config basic stuff

- Try again

- Reload config

Regards