More information would be required to help resolve the situation. I suggest opening a TAC case. If the issue is recurring, put the connector into debug mode and generate a diagnostic file after the issue occurs.
https://www.cisco.com/c/en/us/support/docs/security/sourcefire-fireamp-endpoints/118228-technote-fireamp-00.html
If you would prefer to try and troubleshoot on your own, you can see the Orbital logs in C:\Program Fils\Cisco\AMP\{version}\sfc.exe.log* files. The thread will start with a log that looks like this:
(485480765, +0 ms) Apr 08 00:06:03 [3480]: OrbitalThreadMain install/updating Orbital Service
Thanks,
Matt
