topic Re: Policy deployment issue in Network Security

Policy deployment issue

draganzec — Fri, 21 Feb 2020 15:02:04 GMT

Hi,

after upgrading FMC server and firepower sensors to the newest software version 6.2.2.1 we have a problem to deploy policies to sensors.

When we try to deploy the policy after 20 minutes we get the message:

Deployment failed due to timeout communicating with device. If problem persists after retrying, contact Cisco TAC.

Under Tasks tab there is a message:

Policy Deployment

Policy Deployment to xxxxxxx
Task completed successfully

but it is still 'spinning'.

It seems there is no policy sent to sensors at all.

Maybe there is some stuck task that makes the problem.

Is there any way to purge the database and remove this task?

Can you please help with this issue?

Thank you.

Br,

Dragan

Re: Policy deployment issue

Marvin Rhoads — Tue, 26 Dec 2017 13:29:18 GMT

I generally recommend contacting TAC as the message advises.

The reason is because the fix for these sort of issues usually involves manipulation (via the cli and/or some undocumented perl scripts) of the underlying databases that FMC uses. If you don't do it just right, you can break the FMC in an unrecoverable way.

Re: Policy deployment issue

it.shanghai — Wed, 17 May 2023 05:59:06 GMT

Hello，Did you solve that problem? I have this problem too,Not sure what to do with it.