We recently began receiving the following sftunnel SSL errors on several FirePower devices. Devices have lost their connection to the FireSight and cannot be registered. Thanks in advance, for any helpful information you can provide.
Excerpt from /var/log/messages provided below:
/var/log/messages on FirePower:
Nov 8 00:09:06 <FirePower_hostname>SF-IMS[7636]: [7936] sftunneld:sf_ssl [ERROR] Accept:SSL handshake failed
Nov 8 00:09:06 <FirePower_hostname>SF-IMS[7636]: [7936] sftunneld:sf_ssl [WARN] SSL Verification status: ok
Nov 8 00:09:13 <FirePower_hostname>SF-IMS[7636]: [7948] sftunneld:sf_ssl [INFO] Processing connection from <FireSight_IP>:55444/tcp (socket 10)
Nov 8 00:09:13 <FirePower_hostname>SF-IMS[7636]: [7948] sftunneld:sf_ssl [ERROR] Accept:SSL handshake failed
Nov 8 00:09:13 <FirePower_hostname>SF-IMS[7636]: [7948] sftunneld:sf_ssl [WARN] SSL Verification status: ok
Nov 8 00:09:35 <FirePower_hostname>SF-IMS[7636]: [7646] sftunneld:sf_ssl [ERROR] Unable to connect to port 8305 (IPv4): Connection timed out
Nov 8 00:09:36 <FirePower_hostname>SF-IMS[7636]: [7985] sftunneld:sf_ssl [INFO] Initiate IPv4 connection to <FireSight_IP>
Nov 8 00:09:36 <FirePower_hostname>SF-IMS[7636]: [7985] sftunneld:sf_ssl [INFO] Initiating IPv4 connection to <FireSight_IP>:8305/tcp
Nov 8 00:12:45 <FirePower_hostname>SF-IMS[7636]: [7985] sftunneld:sf_ssl [ERROR] Unable to connect to port 8305 (IPv4): Connection timed out
Nov 8 00:12:54 <FirePower_hostname>SF-IMS[7636]: [8268] sftunneld:sf_ssl [INFO] Initiate IPv4 connection to <FireSight_IP>
Nov 8 00:12:54 <FirePower_hostname>SF-IMS[7636]: [8268] sftunneld:sf_ssl [INFO] Initiating IPv4 connection to <FireSight_IP>:8305/tcp
/var/log/messages on FireSight:
Nov 8 00:09:21 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11439] sftunneld:sf_ssl [INFO] Connected to <sensor_IP>:8305 (IPv4)
Nov 8 00:09:22 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11439] sftunneld:sf_peers [INFO] Delete:Free SSL_CONTEXT for peer <sensor_IP>
Nov 8 00:09:28 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11446] sftunneld:sf_ssl [INFO] Initiate IPv4 connection to <sensor_IP>
Nov 8 00:09:28 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11446] sftunneld:sf_ssl [INFO] Initiating IPv4 connection to <sensor_IP>:8305/tcp
Nov 8 00:09:28 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11446] sftunneld:sf_ssl [INFO] Connected to port 8305 (IPv4): <sensor_IP>
Nov 8 00:09:28 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11446] sftunneld:sf_ssl [INFO] Connected to <sensor_IP>:8305 (IPv4)
Nov 8 00:09:29 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11446] sftunneld:sf_peers [INFO] Delete:Free SSL_CONTEXT for peer <sensor_IP>
Nov 8 00:09:35 <FIRESIGHT_HOSTNAME> SF-IMS[1855]: [1855] sfmgr:sfmanager [INFO] set peer PEER_REMOVED pending <sensor_IP>
Nov 8 00:09:35 <FIRESIGHT_HOSTNAME> SF-IMS[1855]: [1855] sfmgr:sfmanager [INFO] free_peer <sensor_IP>.
Nov 8 00:09:35 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11531] sftunneld:sf_ssl [INFO] Initiate IPv4 connection to <sensor_IP>
Nov 8 00:09:35 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11531] sftunneld:sf_ssl [INFO] Initiating IPv4 connection to <sensor_IP>:8305/tcp
Nov 8 00:09:35 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [1854] sftunneld:sftunnel [INFO] set peer PEER_REMOVED <sensor_IP> pending
Nov 8 00:09:35 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11531] sftunneld:sf_ssl [INFO] Connected to port 8305 (IPv4): <sensor_IP>
Nov 8 00:09:35 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11531] sftunneld:sf_ssl [INFO] Connected to <sensor_IP>:8305 (IPv4)
Nov 8 00:09:36 <FIRESIGHT_HOSTNAME> SF-IMS[1854]: [11531] sftunneld:sf_peers [INFO] Delete:Free SSL_CONTEXT for peer <sensor_IP>
