topic Re: FMC Stuck in Deploying phase in Network Security

FMC Stuck in Deploying phase

ciscoworlds — Fri, 21 Feb 2020 15:35:22 GMT

Hi.

I have an FTDv (6.2.2.81) and an ASA 5515-x FTD (same version) in my lab. On FMC both devices stuck on "Deployment" phase and I cannot cancel it. I managed to stop the ASA FTD and restart the FMC and now it shows "Failed in Deployment" but cannot do the same for FTDv. I restarted FMC and completely powered off the FTDv, but again FMC tried to deploy the policies onto FTDv and stuck at about 40%. It doesn't allow me to deploy another policy and says the deployment is in progress.

What can I do?

Re: FMC Stuck in Deploying phase

Moon1998 — Wed, 13 Jun 2018 14:24:24 GMT

I had same issue. Luckily, I had quite recent backup, so I tried restoring FMC from it. It helped, and next policy deployment succeeded.

Re: FMC Stuck in Deploying phase

Florin Barhala — Thu, 14 Jun 2018 11:52:02 GMT

What about traffic impact? If FMC gets stuck is there any risk traffic gets blocked on the ASA ?

Re: FMC Stuck in Deploying phase

Dustin Anderson — Fri, 15 Jun 2018 16:42:37 GMT

This is the second time we have had this happen. It's a bug from 6.0, but must be back in the 6.2 code.

You have to open a TAC and they have to go clear/fix the database.

As it's compiling the change, there's no risk to the firewall as it is still running with the previous update.

Re: FMC Stuck in Deploying phase

Florin Barhala — Fri, 15 Jun 2018 19:48:46 GMT

Thanks for the answer; now is there a specific version affected like 6.2.x.y or or all 6.2.x versions?

Re: FMC Stuck in Deploying phase

c.sanchez@italtel.com.pe — Wed, 25 Jul 2018 16:24:07 GMT

I opened a ticket support then Cisco's Engineer send me a script I push that scrip into the FMC and run its. Therefore I applied again the deploy with successful result.

regards

Re: FMC Stuck in Deploying phase

Nikolaj Pabst — Thu, 26 Jul 2018 08:28:46 GMT

Hi Florin,

I would suggest jumping to the latest 6.2.3 patch, a lot of bugs and CVE's are fixed.

The affcted relases are:

6.2.1

6.2.2

6.2.2.1

6.2.3

Re: FMC Stuck in Deploying phase

hamoudud1 — Wed, 05 Sep 2018 14:04:58 GMT

Dear c.sanchez,

Nice to know that you solved your issue, could you share this script with us.

am facing same issue here : (

BR,

Hamoud Hamdan

Re: FMC Stuck in Deploying phase

robinsra82 — Wed, 30 Jan 2019 16:24:07 GMT

I am having this same issue on 6.2.3.7...awaiting TAC's response.

Re: FMC Stuck in Deploying phase

Albert_Hernandez — Fri, 03 May 2019 18:28:30 GMT

Did you solve it?

I have the same problem...

Re: FMC Stuck in Deploying phase

KriegerPiloto — Tue, 25 Jun 2019 14:11:32 GMT

I had the same problem at a client, opened a SR and TAC recommended to give FMC a reboot, did that and policy deployment time went back to normal (3-4minutes)

FMC version is 6.2.3.10

Re: FMC Stuck in Deploying phase

Albert_Hernandez — Tue, 25 Jun 2019 14:49:07 GMT

I solved the problem.

My problem was with the firepower, my firewall erase, forgot, delete, the firepower module IP. I just rewrite the ip from my module and thats it.

Re: FMC Stuck in Deploying phase

Miguel52 — Mon, 26 Aug 2019 20:38:35 GMT

Send command on FTD (sensor)

>expert

Password:

firepower:/home/root# pmtool restartbyid ngfwManager

Re: FMC Stuck in Deploying phase

ziqex — Wed, 29 Jul 2020 15:37:58 GMT

Facing the same issue Software Version 6.3.0 (build 84).
Waiting for TAC response.
14 appliances stuck in 40% Deployment - Policy and object collection complete.