topic Re: FMC 4500 Backup to SCP Server in Network Security

FMC 4500 Backup to SCP Server

TW80CJ5 — Fri, 25 Oct 2019 15:44:00 GMT

Hello...

I am trying to backup an FM4500 to my SCP Server. I can not get the backup to transfer. I am not using SolarWinds SCP Server and am unsure how / where to put SSH Public Key...

See the screenshot.

Re: FMC 4500 Backup to SCP Server

balaji.bandi — Fri, 25 Oct 2019 16:51:44 GMT

Your post do not have a screenshot, what SCP Server are you using ? from your PC you able to test using Winscp is the SCP server working? if that is working.

Then follow below guide Step 6:

https://www.speaknetworks.com/backup-restore-firepower-management-center/

Re: FMC 4500 Backup to SCP Server

TW80CJ5 — Fri, 25 Oct 2019 16:54:27 GMT

Re: FMC 4500 Backup to SCP Server

TW80CJ5 — Fri, 25 Oct 2019 16:54:54 GMT

I am using SolarWinds SCP Server

Re: FMC 4500 Backup to SCP Server

TW80CJ5 — Fri, 25 Oct 2019 17:13:59 GMT

Hello BB,

I tried the link you provided and it did not work. I did not have the option to clear or remove the public ssh keys there.

I am trying to use the username and pw and not ssh public key.

I am using SolarWinds SCP Server.

Re: FMC 4500 Backup to SCP Server

balaji.bandi — Fri, 25 Oct 2019 21:50:11 GMT

I have same configuration i am able to backup and SCP to my (Linux server) all works

here is my config ( same as urs)

here is ,my linux side file copied ( 240MB)

-rw-r--r-- 1 root root 274319360 Oct 25 22:43 bb-2019-10-25T21-32-25.tar

Suggestion : check on SFTP/SCP server you have enough permission to login - check the Logs on SCP/SFTP Server

check the you have enough space available on the destination depends on your backup size.

check FMC Backup ( there is space so some time it may not take - create a directory FMC-backup and try if above settings good)

Re: FMC 4500 Backup to SCP Server

TW80CJ5 — Mon, 28 Oct 2019 14:22:43 GMT

Good Morning BB,

I am using Windows 10 with SolarWinds SCP Server running. I cannot get the file to transfer.

Ideas?

Re: FMC 4500 Backup to SCP Server

balaji.bandi — Mon, 28 Oct 2019 14:35:19 GMT

Windows 10 - check the FW and Off the firewall

Solarwinds Server - check any FW / required IP to trust (i do not remember the settings, one of my friends had an issue we need to add IP address somewhere in Global Settings to work).

Re: FMC 4500 Backup to SCP Server

TW80CJ5 — Mon, 28 Oct 2019 14:45:48 GMT

In the FMC, under Access List, I have any/any on port 22.

Windows Firewall I have any/any set too.

In the FMC, Under Remote Storage Device>Storage Type>SSH: Connection I use my SCP Server IP...

In the directory field, I am putting the file path. But I think I may be messing this part up as I am not sure if I am putting the information in there correctly...

Username and password, I am using my scp server's username and pw....

I can SCP to my machine using other devices, etc.

Re: FMC 4500 Backup to SCP Server

balaji.bandi — Mon, 28 Oct 2019 15:05:59 GMT

as suggested check this :

check FMC Backup ( there is space so some time it may not take - create a directory FMC-backup and try if above settings good)

Re: FMC 4500 Backup to SCP Server

TW80CJ5 — Mon, 28 Oct 2019 16:25:54 GMT

BB,

I changed the folder name and verified no spaces. I inserted a dash in place of space and tried the SCP copy again and it failed.

Re: FMC 4500 Backup to SCP Server

balaji.bandi — Tue, 29 Oct 2019 16:04:31 GMT

Do you have the correct folder - changing at GUI should be same as physically available on SCP Server same name

Keep a close eye on the folder is root you setup then you need to mention here "/"

the best is keep look at Solarwinds SCP Server Logs, check is the FMC intiated connected yes or not ?

Re: FMC 4500 Backup to SCP Server

TW80CJ5 — Tue, 29 Oct 2019 16:14:28 GMT

I am pointing to the default folder path from SCP: C:\SFTP_Root

My SCP Server: 192.168.1.10

FMC does not try to initiate a connection when I am looking at the SCP Server Log.

Re: FMC 4500 Backup to SCP Server

TW80CJ5 — Tue, 29 Oct 2019 16:31:26 GMT

We had a Firewall Access Rule blocking it....as soon as I saw it, it connected!!!

Thanks for the help!!!!!