FirePower Error

[Quintin.Mayo]

We have been getting more frequent occurrences of the error below from the built in monitoring of the firepower appliance. "Description: Cisco-Intelligence-Feed received code (Unable to download file)".

It appears to clear after several minutes typically, but I need guidance on how to properly monitor this alert, what it specifically means when it goes off and to confirm there isn’t a more structural issues with the firepower management center virtual.  Any help in this matter would be greatly appreciated.

[mikael.lahtela]

Hi,

I see this from time to time and it's annoying and when I do basic troubleshooting it's all fine.

Here is some troubleshooting steps:
https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118852-technote-firesight-00.html

Here is the correct link:
https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/117997-technote-firesight-00.html?referring_site=RE&pos=1&page=https://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118791-technote-firesight-0...

br, Micke

[Quintin.Mayo]

Using the document to access the log I was able to find the error message that is causing our frequent alerts "CloudAgent:IPReputation [WARN] Download unsuccessful: Timeout was reached". This specific event has generated 16 events in about 60 hours. The script tries every 2 hours it appears, so it’s failing to download the update 50% of the time. Unfortunately this doesn’t indicate why it’s failing. Is there an intermittent latency issue on Cisco’s side? The Logging seems to indicate the timeout might be as short at 15 seconds.