Cisco ASA 5516-X Firepower update rules problem

[atsikora1]

Hello,

I have problem with ASA 5516-X. When I try to update Firepower rules I get the following error: "Connectivity problems. Unable to download rules."

I logged in to sourcefire module and:

@Sourcefire3D:~$ sudo ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_req=1 ttl=48 time=23.0 ms
64 bytes from 8.8.8.8: icmp_req=2 ttl=48 time=22.9 ms

@Sourcefire3D:~$ sudo ping google.pl
ping: unknown host google.pl

but nslookup works:

@Sourcefire3D:~$ nslookup google.pl
Server: x.x.x.x
Address: x.x.x.x#53

Non-authoritative answer:
Name: google.pl
Address: 172.217.18.3

I added the licence to ASA and everything else is working fine.

[Montague_65]

I have a 5506X. Getting the same error as mentioned above. Mine gets errors on all 3 updates (Product, Rule & Geolocation) I have purchased TAMC license and no updates are possible. WTH ??

[Montague_65]

Just an FYI. I cant speak to all hardware versions of ASA's. Mine is a 5506-X. I successfully completed a manual upgrade to 6.0.1-29  

It took close to 3 hours for it to complete and it does an automated reboot, not of the ASA, but of the SFR module it self. I have heard multiple times the 5506X's take longer than all others to upgrade. As of yet the company I work for hasn't approved an upgrade on productions ASA's. The 5506X I am referring to here is my personal home version,,,, for you know,,,, learning,,, breaking,, cursing,,, fixing :-).

I also could not get the Rules to auto upgrade, I'm going to do that one next.

Hope this helps.

[ianh000011]

This is a big problem.  Mine is acting exactly the same.  I don't think we've done anything wrong.

UPDATE.  I edited /etc/hosts and added a line for the support.sourcefire.com server from the list on this page under "troubleshooting"  It works, but it's not a good fix.