07-21-2025 11:05 AM
Good afternoon
FMC and FTD's are on different GeoDB versions running 7.4.2.2
FMC is on 2025-06-21-118 and FTD's is on 2022-07-04-101
Seems the FMC is not pushing the updated database to the FTD's
Tried manually download and install geolocation update from support site - did not make a difference
FMC is getting latest's updates - it just never push it to the FTD's
Why would the FMC we on 2022 if the FMC is 2025. No outstanding configuration. All is deployed and FTD's are in good state.
Anyone else ran into the same issue
07-22-2025 07:38 AM
check DB in both FTD
if it not update in standby only then there is issue in your failover link
MHM
07-22-2025 09:23 AM
Good afternoon
I did check both FTD's : here are the outputs
3130-02: cat country_code_map_version
2022-07-04-101
3130-01: cat country_code_map_version (currently active)
2022-07-04-101
FMC: cat country_code_map_version
2025-06-21-118
09-30-2025 06:49 PM
What was the fix? I am having the same issue after upgrading to 7.6
10-01-2025 09:40 AM
@Stephen.Mize - I currently have a cisco case open and this have been escalated - I will post here once we have a solution.
10-01-2025 09:48 AM
Wow. Hopefully that is not the case for us. We rely heavily on geo fencing. Thanks for getting back to me so quickly.
10-08-2025 11:58 AM
Response from Cisco TAC and Escalation Team
FMC pushes GeoDB data—specifically from the country code package—to the FTDs it only transfers two files:
ipv4_country_code_map
ipv6_country_code_map
These files are pushed to the FTD whenever an Access Control (AC) policy containing geolocation conditions is deployed.
The push occurs during each deployment to the FTD.
Both the FMC and FTD store these files in the /var/sf/geodb/ directory. While this directory on the FTD may contain additional files, only the two mentioned above are relevant and used in FMC-managed FTDs.
This was discussed internally with senior team members and found similar reported cases. To further validate the behavior, they also conducted lab testing.
As shown in the output captured during our session, the latest update was successfully pushed on October 6th.
FMC
root@FMC:/var/sf/geodb# ls -la
-rw-r--r-- 1 root root 15 Oct 6 02:00 country_code_map_version
FTD
root@FTD:~# cd /var/sf/geodb
-rw-r--r-- 1 root root 14638281 Oct 6 19:27 ipv4_country_code_map
-rw-r--r-- 1 root root 14417904 Oct 6 19:27 ipv6_country_code_map
An enhancement bug has already been filed to address this - https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwi39226
The FMC / FTD is working the way intended as long as the country_code_maps are the same, there is no need for concern.
Hope this help and bring clarification on this.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide