FTD unable to ping tools.cisco.com from CLI

[NetworkMonkey101]

I have an FTD which is able to ping 8.8.8.8 and internet but not able to ping system tools.cisco.com. Threat Defence Cloud error is showing. This FTD is using the same DNS policy as another which is able to ping tools.cisco.com

[balaji.bandi]

Try ping the IP resolved by tools.cisco.com (is that works)  the updates uses different ports like 80 or 443 ( need to look the document what port they get updates.

Non-authoritative answer:
Name: tools.cisco.com
Addresses: 2001:420:1101:5::a
72.163.4.38

Threat Defence Cloud error is showing.

what is the error you getting ?

[NetworkMonkey101]

Hi seeing this when attempting to ping tools.cisco.com

Error on FTD shows

states please check network connection

[balaji.bandi]

This FTD is using the same DNS policy as another which is able to ping tools.cisco.com

as per your post i was in impression the DNS work, that is reason i have edited my comment.

are you able to ping with IP address which resolved to tools.cisco.com?

check DNS config :

https://www.cisco.com/c/en/us/td/docs/security/firepower/630/fdm/fptd-fdm-config-guide-630/fptd-fdm-system.html

[NetworkMonkey101]

Not sure if this is relevant or another issue but the SSE connector is showing "waiting" on the FTD that cannot reach tools.cisco.com and on the working model it is green..

[NetworkMonkey101]

Ping is failing from the management int

[Rob Ingram]

@NetworkMonkey101 run "show network" is DNS configured for the management interface?

If not configure using the "configure network dns servers <ip>" command.

https://www.cisco.com/c/en/us/td/docs/security/firepower/command_ref/b_Command_Reference_for_Firepower_Threat_Defense/c_3.html#wp2291657657

[NetworkMonkey101]

I am missing hostname, dns and domain. I can see I can set the hostname and add dns from cli how can I add the domain?

added the hostname and dns and can no ping tools.cisco.com and also perform dig command, domain not showing though and needs adding, what is the command as cannot see it under configure network >

[Aref Alsouqi]

"added the hostname and dns and can no ping tools.cisco.com" ... Did you mean to say "... can now ping ..."?

To add the search domain you can use the command "configure network dns searchdomains ...".