Smart licensing error

[Singh007]

i am getting error while registering the device FPR1140 running code 9.14(ASA) as : 

REGISTERING - REGISTRATION IN PROGRESS
Export-Controlled Functionality: NOT ALLOWED
Initial Registration: FAILED on Jun 21 2023 10:29:49 UTC
Failure reason: Communication message send error
Next Registration Attempt: Jun 21 2023 10:47:57 UTC

I then check and found that DNS entry is correct:

dns domain-lookup outside
dns server-group DefaultDNS
name-server 4.2.2.2
name-server 8.8.8.8
domain-name ngk

i can do ping for any outside ip , but hostname resolution is not happening i.e i can ping 8.8.8.8 but cannot ping google.com

TAC said they will not assist me as this has to done from my end
Any advice that i need to do

[Marvin Rhoads]

To check registration you should be using "ping system" from the cli since that forces the traffic out the management interface. the DNS servers setup for management are different than what's used for data interfaces. Check that setup with "show network".

I also note that you show "Export-Controlled Functionality: NOT ALLOWED". normally you need to specify in the Smart License token generation to allow this. It is a check box to be checked when generating the token.

[fhermion]

Hey Singh007,

Could you please let me know how you manage this ?

Thanks

[Marius Gunnerud]

to do URL lookups you need to do sudo in expert mode.

how is the management interface exposed to the internet?  Is it directly connected with a public IP or does it loop through the FTD data interface?  if it goes through the FTD data interface have you permitted traffic from the management interface to tools.cisco.com on https port?

[AHack210]

Personally, I configure both the outside and management for DNS

dns domain-lookup outside
dns domain-lookup management

Perseus# ping state.hi.us
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 132.160.216.127, timeout is 2 seconds:

Perseus# capture cap1 interface management real-time match udp any any eq 53

Warning: using this option with a slow console connection may
         result in an excessive amount of non-displayed packets
         due to performance limitations.

Use ctrl-c to terminate real-time capture


   1: 13:39:43.028746       172.30.4.114.17743 > 208.67.222.222.53:  udp 29
   2: 13:39:43.137627       208.67.222.222.53 > 172.30.4.114.17743:  udp 45