cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
630
Views
2
Helpful
6
Replies

GeoDB is on different version on FMC and FTD's

BACANEL
Level 1
Level 1

Good afternoon

FMC and FTD's are on different GeoDB versions running 7.4.2.2
FMC is on 2025-06-21-118 and FTD's is on 2022-07-04-101
Seems the FMC is not pushing the updated database to the FTD's
Tried manually download and install geolocation update from support site - did not make a difference

FMC is getting latest's updates - it just never push it to the FTD's

Why would the FMC we on 2022 if the FMC is 2025. No outstanding configuration. All is deployed and FTD's are in good state.

Anyone else ran into the same issue

 

6 Replies 6

check DB in both FTD 
if it not update in standby only then there is issue in your failover link 

MHM

Good afternoon 

I did check both FTD's : here are the outputs 
3130-02:  cat country_code_map_version
2022-07-04-101
3130-01:  cat country_code_map_version (currently active)
2022-07-04-101

FMC:  cat country_code_map_version
2025-06-21-118

 

Stephen.Mize
Level 1
Level 1

What was the fix?  I am having the same issue after upgrading to 7.6

@Stephen.Mize - I currently have a cisco case open and this have been escalated - I will post here once we have a solution. 

Stephen.Mize
Level 1
Level 1

Wow.  Hopefully that is not the case for us. We rely heavily on geo fencing.  Thanks for getting back to me so quickly.

 

Response from Cisco TAC and Escalation Team

FMC pushes GeoDB data—specifically from the country code package—to the FTDs it only transfers two files:
ipv4_country_code_map
ipv6_country_code_map
These files are pushed to the FTD whenever an Access Control (AC) policy containing geolocation conditions is deployed.
The push occurs during each deployment to the FTD.

Both the FMC and FTD store these files in the /var/sf/geodb/ directory. While this directory on the FTD may contain additional files, only the two mentioned above are relevant and used in FMC-managed FTDs.

This was discussed internally with senior team members and found similar reported cases. To further validate the behavior, they also conducted lab testing.

As shown in the output captured during our session, the latest update was successfully pushed on October 6th.

FMC
root@FMC:/var/sf/geodb# ls -la
-rw-r--r-- 1 root root 15 Oct 6 02:00 country_code_map_version

FTD
root@FTD:~# cd /var/sf/geodb
-rw-r--r-- 1 root root 14638281 Oct 6 19:27 ipv4_country_code_map
-rw-r--r-- 1 root root 14417904 Oct 6 19:27 ipv6_country_code_map

An enhancement bug has already been filed to address this - https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwi39226

The FMC / FTD is working the way intended as long as the country_code_maps are the same, there is no need for concern.

Hope this help and bring clarification on this.

Review Cisco Networking for a $25 gift card