FTD SSE Connector Service down

[Ditter]

Hi to all,

i am running a pair of FTDs in HA. 

They run 7.2.8.

Suddenly the backup pair started announcing that the SSE Service is down (please see attached png for FTD-2).

The primary FTD (FTD-1) works OK and the SSE Service is user disabled as i have disabled the connection to Cloud SecureX.

All three PNGs are attached.

I also rebooted the FTD-2 in case the problem could be resolved with the reboot. 

I also tried the following with no success:

1. https://bst.cisco.com/quickview/bug/CSCwj14589

2. https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/217616-troubleshoot-cisco-cloud-configuration.html

Any other idea?

Thnaks, 

Ditter 

[Ditter]

Hi to all,

has anybody faced this problem or it is only me?

Thanks,

Ditter

[TommyDK · Accepted solution]

Hi Ditter

I encoutered this issue today, and the work-around from the bug rapport worked out for me.

 Workaround: Copy contents of /etc/sf/connector.toml from a working sensor in customer network to the impacted sensor.

Then run following commands to restart service:

sudo pmtool disablebyid SSEConnector

sudo pmtool enablebyid SSEConnector

[Ditter]

@TommyDK Imagine that i did these steps some days ago , but today after seeing your post i decided to give it another try.  The problem that it did not work for me the first time , was that the connector.toml file in the failing unit was not exactly the same as the working one , now i i did it through hash and it was finally exactly the same. 

Result : it works. Thanks!

[osn]

I ran in too the same issue but the workround above does not help neither a reboot of the FTD. It is a HA pair and it seems to wokning fine. It is the secondary FTD thats been face this problem. it says int the bug review that it is 7.2.7 and 7.2.8 encountered so i guess a unattendet upgrade would fix this problem ?? Or .....