NGFWv-AWS - EBS volume encryption issue

[varunes10]

I am running multiple NGFWv in our AWS environment from the marketplace. When trying to setup the EC2 instance for the firewall image and if I selected to encrypt the ebs volume with default aws/ebs key then the appliance does not respond on boot up. I also do not see any system logs for the EC2 during boot up. I do see system logs while terminating the instance. We have a policy to have all ebs volumes encrypted else will be flagged non compliant. Does the NGFWv support encryption of the ebs volume in AWS? Any insight into this will be helpful. Thank you.

System logs on shutting the instance down.

IO memory blocks requested from bigphys 32bit: 87680

INIT: version 2.88 booting

Starting udev

Configuring network interfaces... done.

Populating dev cache

TODO: Remove /tmp/disable_dpdk to enable dpdk on ngfwv

Found virtual boot drive /dev/xvda1

Found virtual disk0 drive /dev/xvda2

fsck.fat 3.0.28 (2015-05-16)

Starting check/repair pass.

FATs differ but appear to be intact. Using first FAT.

Cluster 258046 out of range (207673272 > 2092549). Setting to EOF.

Cluster 258047 out of range (223535692 > 2092549). Setting to EOF.

Cluster 258048 out of range (10059955 > 2092549). Setting to EOF.

Cluster 258049 out of range (133079543 > 2092549). Setting to EOF.

Cluster 258050 out of range (65038938 > 2092549). Setting to EOF.

Cluster 258051 out of range (219439810 > 2092549). Setting to EOF.

Cluster 258052 out of range (46504770 > 2092549). Setting to EOF.

Cluster 258053 out of range (10103903 > 2092549). Setting to EOF.

Cluster 258054 out of range (250869187 > 2092549). Setting to EOF.

Cluster 258055 out of range (131507214 > 2092549). Setting to EOF.

Cluster 258056 out of range (79941071 > 2092549). Setting to EOF.

Cluster 258057 out of range (6384958 > 2092549). Setting to EOF.

Cluster 258058 out of range (259674023 > 2092549). Setting to EOF.

Cluster 258059 out of range (51362568 > 2092549). Setting to EOF.

Cluster 258060 out of range (262079956 > 2092549). Setting to EOF.

Cluster 258061 out of range (256313087 > 2092549). Setting to EOF.

Cluster 258062 out of range (34401673 > 2092549). Setting to EOF.

Cluster 258063 out of range (257800812 > 2092549). Setting to EOF.`

[varunes10]

Same here. Still waiting on an update from @jimholla on the fix.

[jimholla]

At this point, it has only been fixed with the 6.4.0-113 image that is in the marketplace. Other versions will be fixed but we are gated by another issue. I do not have an ETA.

[ivan.auger]

Has there been any progress on this?  Issue also occurs with 7.0.2-88

[iamjeroenris]

I do not see very helpfull feedback on this topic! Is there no solution for this issue?

I am expiriencing the same problem at the moment for the Cisco Secure Firewall Threat Defense Virtual - BYOL AMI in AWS.