FTD 7 HA Deployment Failure

[nehmaan123]

Anyone have any ideas ?

Refer to the following troubleshooting information when contacting Cisco TAC.

Other logs
Jan 21 05:08:12 Starting Export for ApplicationDetectors
Jan 21 05:08:13 Finished Export for ApplicationDetectors
Jan 21 05:08:13 Starting Export for LSP
Jan 21 05:08:31 Finished Export for LSP
Jan 21 05:08:31 Starting Export for NGFWPolicy
Jan 21 05:08:31 Finished Export for NGFWPolicy
Jan 21 05:08:31 Starting Export for PlatformSettings
Jan 21 05:08:31 Finished Export for PlatformSettings
Jan 21 05:08:31 Starting Export for SensorPolicy
Jan 21 05:08:31 Finished Export for SensorPolicy
Jan 21 05:08:31 Starting Export for AccessControl

Jan 21 05:08:46 failed to generate IPS overlay LUA config: (/ngfw/var/sf/bin/snort_config_exporter -lspDirPath /ngfw/var/cisco/deploy/sandbox/exported-files/var/sf/lsp/active-lsp -jsonFile /ngfw/var/cisco/deploy/sandbox/exported-files/customdata/Intrusion/ips_rule_overlay.json -luaOutputDir /ngfw/var/cisco/deploy/sandbox/exported-files/var/sf/detection_engines/ee18f76a-5a8f-11ec-a587-97cca05ddc7d -snortVersion 3.1.0.100-11 -logOutputFile /ngfw/var/log/sf/policy_deployment.log -customDBPath /ngfw/var/cisco/deploy/sandbox/exported-files/customdata/Intrusion/custom_rules_ntd.db) with rcode 1

[balaji.bandi]

7.0.X  is new version .. so TAC intervention required here to investigate for you.

[marce1000 · Accepted solution]

   - FYI : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvy35416

 M.

[nehmaan123]

Hi, 

Yes I think this is the one. Although, I can't say the conditions are the same. I've only just upgraded to latest patch at 7.0! 

You gotta love some FirePOWER firefighting.

I'll give it a try soon.

Thanks marce1000

[Yordan Yordanov]

Hi Marce,

the error refers to a multidomain. what about a single domain? i have the problem with a single domain

br