CSCvn82378 - Traffic through ASA/FTD might stop passing upon upgrading FMC to 6.2.3.8-51 - 1

[leogal777]

Hi, unfortunately we hit the same thing.

We reverted the FMC back to 6.2.3.7 (snapshot of VM from 1 day prior to upgrade).

Everything seemed normal, but after few hours in production we had outage again.

Initial recommendations from TAC was to upgrade FMC to 6.3.0 and there was 1 confirmed

case, when the customer upgraded from 6.2.3.8 to 6.3.0 and the problem got solved.

[Daniele Giordano]

Hi, in the bug toolkit there isn't any indication about fixed released but there is a description about condition and a suggested workaround.

Anyhow TAC can be more helpful.

Regards.

Conditions:
When a device is configured with a File Policy with the HTTP protocol included.

Workaround:
new workaround: Disable the file policy


Use the uninstaller script to rollback to the previously installed patch release. In case both the FMC and the managed device have been upgraded, the managed device has to be rolled back using the CLI. The uninstaller script will be in the location '/var/sf/updates'.

In case only the FMC has been upgraded, the uninstaller for FMC is available on the user interface under "System > Updates".

[Lukaszoo]

have you tried the upgrade to 6.2.3.9 ? if so any luck ?

[leogal777]

After last week I am afraid to click into FMC, let alone upgrade to any new software of this "technology".
I will let someone else to try it and wait at least a week or two.