Hello Fire-Jumper Community,
I'm have a FMC in which I have added 1x Firepower 4120 FTD Instance and 8x ASA5508-X FTDs. I am currently unable to get my FMC to register another Firepower 4120 FTD which is in the same network.
Connectivity Checks:
1. FTD is able to communicate with FMC (ping success, telnet port 8305 success)
2. FTD & FMC are in same network :)
Steps to connect:
1. Add manager in the FTD with the Key
2. Add the FTD in the FMC with the same key
Output in FMC:
1. Registration shows the "Green Tick - Register".
Communication with <Firewall Name> established, discovery in progress
2. Then appears a "Red Error Message - Discovery"
<Firewall Name> - Discovery failed due to internal error. If problem persists, contact Cisco TAC.
3. Then FMC starts the "Unregistration".
Unregistration completed. <Firewall Name> - Unable to get status message
I was able to find in the bug search tool the bug "CSCvg62301" that can be the cause of this problem.
Conditions of bug CSCvg62301 :
The can happen with a slow link between the FMC and the device. During discovery, policies are synced between FMC and device, and those can timeout.
Logs in action queue would show RPC timeouts during discovery phase
What I fail to understand is that both devices are on same network and there is not much latency involved then what can be cause of this problem and how to fix it?
