â12-24-2019 02:49 AM - edited â02-21-2020 09:47 AM
I am not able to login to FMC GUI. It is showing "System processes are starting, please wait."
The screenshot is attached.
What could stop the process?
â12-24-2019 11:45 AM
Hi there! A couple of questions:
Thank you for rating helpful posts!
â12-24-2019 11:53 PM
I am on 6.1.0.1 patch 6.
I do have access to cli.
â12-28-2019 04:27 AM
The restarting of the box did the trick for me. The other day I was reading community forum to see If anyone faced this kind of issue earlier. There I saw they checked " pmtool status | grep -i gui ". To see if any process is stuck or not?
Unfortunately, I already reloaded so nothing to check here. But now I see that output is as
root@firepower:/# pmtool status | grep -i gui
mysqld (system,gui,mysql) - Running 7958
httpsd (system,gui) - Running 7961
sybase_arbiter (system,gui) - Waiting
vmsDbEngine (system,gui) - Running 7962
ESS (system,gui) - Running 7990
DCCSM (system,gui) - Running 8535
Tomcat (system,gui) - Running 8615
VmsBackendServer (system,gui) - Running 8616
mojo_server (system,gui) - Running 8041
Also I came across a command that restart FMC console services. " /etc/rc.d/init.d/console restart".
Is the above-mentioned command enough to start all (disabled/stuck) services?
â12-30-2019 08:02 PM
Yes the console restart script will restart all necessary processes associated with the Firepower Management Center server application.
â09-02-2021 03:17 PM
In one sense this is true, but if you rely heavily on AD integration and passive authentication a FMC outage can becomes a serious problem. Your AD agents or ISE is relaying all your user to IP mapping through the FMC back to the individual firewalls.
â11-25-2020 08:02 PM
if I do /etc/rc.d/init.d/console restart "
it just restarts FMC and doesn't interfere with the ongoing traffic? or how ?
â11-26-2020 01:23 AM
Restarting FMC does not interrupt traffic flow through managed devices.
In some small percentage of cases it may result in URL lookups not being successful (where there is a URL filtering policy and the target URL is not already cached and categorized on the managed device).
â11-29-2020 06:57 AM
Another thing that can be affected would be the user-to-IP mapping. During the FMC restart, any new mapping could not be created, and that would cause the old mapping to be used instead which would allow limited users to have full access, or vice-versa, depending on the last connected user from that IP.
â09-03-2021 12:19 AM - edited â09-06-2021 04:36 AM
Firewall Management Center (FMC) provides extensive intelligence about the users, applications, devices, threats, and vulnerabilities that exist in your network. It unifies all these capabilities in a single management interface.
â10-01-2021 04:22 AM
My problem is a little different. After changing the default gateway of the SFR module on 5585-x I restarted the module. The module is not keeping the change. What is the proper command to change the default gateway of the module? It let me delete and add the default gateway with the generic Linux command.
â10-01-2021 07:54 AM
You should use the "configure network" subcommands on a Firepower service module vs. the Linux shell commands.
â10-04-2021 09:26 AM
Marvin. Thanks you, My issue is now resolved. I was getting an error each time I attempt to modify the default GW with the "config network" command. I had to delete IP, subnet and default GW from the NIC. I was then able to add them back with the new default GW.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide