topic Re: Updates on Sourcefire in Network Security

Updates on Sourcefire

Phil Bradley — Fri, 21 Feb 2020 14:40:35 GMT

I am trying to use the download updates on the ASA firepower configuration-update screen and it keeps failing with the message "Download updates failed: Unable to connect to update server". What interface does the sourcefire module use to contact the update server? I have defined a management only interface for my ASA and the sourcefire is on this same network. Is this configurable?

Re: Updates on Sourcefire

mikael.lahtela — Wed, 08 Nov 2017 16:41:09 GMT

Hi,

It depends on your setup, are you using ASDM or FMC?
Check these links if helps you in the right direction.
https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-device-manager/200889-Using-ASDM-to-manage-a-FirePOWER-module.html

https://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html#pgfId-139878

br, Micke

Re: Updates on Sourcefire

Phil Bradley — Wed, 08 Nov 2017 18:08:29 GMT

Hi Michael,

I'm currently using ASDM to manage the firepower. I have dedicated gi1/8 as the management on the ASA and the management 1/1 is on the same network as the 1/8 interface which is tied to the sourcefire management. Typically the management interface cannot get out to the internet, so that's why I'm asking which interface does the sourcefire use to reach the internet. I'll look over the documents and see if the answer is there. Thanks!

Re: Updates on Sourcefire

Phil Bradley — Wed, 08 Nov 2017 22:39:19 GMT

Ok, so I have this working now. I ssh'd into the sourcefire box and tried basic troubleshooting commands with nslookup and telnet and was unable to resolve support.sourcefire.com. I set the DNS servers for the sourcefire box through the command line. Is it not possible to set the dns servers through ASDM? Also, it used the management interface to connect to the outside and it was getting blocked by my untangle internet filter.