Talos Connectivity Problem

[Ditter]

Hi to all ,

i am getting many messages as the following:

Severity: critical
Module: Talos Communication
Description: 3 modules failed:

• * URLDB- Failed to retrieve beaker inventory
• * LSP- Failed to retrieve beaker inventory

My subscription is active (it expires in 2026).  

Any ideas about why is this happening?   Is it a problem that has to do with Talos?

Please note that this is the first time i get this message. 

The only change i did some days ago was to change the "Cached URLs Expire" which was set to never and i changed it to "week" but i do not think that my issue has something to do with it.

Any ideas,

Thanks, 

Ditter.

[Chess Norris]

Did the upgrade at a customer site today. After the upgrade I noticed another alert - "Smart Agent communication error with Smart Licensing Cloud". 

 Customer Success Network integration was already enabled. Anyone else got the same error?

/Chess

Edit. Seems like this alert comes a bit randomly. No more alerts on the last 3 checks. Will keep monitor it for a while.

[Ditter]

This TALOS thing drives most of us crazy. 

I upgraded to FMC 7.7.0.91 (from 7.6) and the problems with all these messages came back on (every 5 minutes but not all day , some specific time periods) .

Health Monitor Alert from fmc
Time: Thu Jul 3 06:35:08 UTC 2025 UTC
Severity: critical
Module: Talos Communication
Description: 1 modules failed:

• * LSP- Failed to retrieve beaker inventory

As we speak no messages such as these,   are coming in but no warranty that they will not restart ...  

And currenty i run VDB version: build 408 ( 2025-04-29 08:56:28 )

Just for Information.

Ditter

[Mark Elsen]

   - @Ditter            FYI :   (corrections)
                                      https://www.cisco.com/c/en/us/support/docs/field-notices/742/fn74284.html
                                      https://www.cisco.com/c/en/us/support/docs/field-notices/742/fn74272.html

   M. 

[Chess Norris]

After I had the same issue even upgrading a customers FMC to the suposed fixed version 7.6.1, I opened a TAC case. TAC then told me to run the following command from expert mode - start_beaker_process.sh beaker3

It's now been two weeks with any alerts. Not sure what's the difference between this script and restarting the breaker process (that I also tried before but that only helped temporary). Might be worth giving this command a shoot for those still struggling with this alert.

/Chess

[Ditter]

Ι recall to have done this stop/start process in the past but the messages kept randomly coming back. I will give it a new try. Thanks.

[Nigel-Bungay · Accepted solution]

Running this "start_beaker_process.sh beaker3" resolved my issue.

The certificate "openssl x509 -text -in /var/sf/beaker3/securefirewall-dev-prod-01_prod.pem" is now in date and I am able to get URL Filtering updates under the Cloud Integrations section. I am running FMC 7.7. 

[Chess Norris]

I thought that command resolved my issue as well. However, we just received the same alert again.  The FMC has been running fine without this alerts for almost 3 month. I will open a new TAC case and hope they can provide a permanent fix this time.

[Ditter]

Me too, the last days i get many of these messages every 5 minutes , not the whole day but occasionally, but when it starts i keep getting these failures every 5 minutes.

Issuing the commands : 

pmtool restartbyid talosAgent
pmtool restartbyid beaker3

did not help.

I am running 7.7.10-3089.

Thanks,

Ditter

[Replace7073]

We had this same issue in the past but it went away after a specific VDB/SRU update.

We received some of these alerts yesterday after hours but today they have persisted every 5 minutes. I ended up opening a new TAC case referencing our original one.

[Chess Norris]

Did you get an answer from TAC? 

TAC told me we are hitting this bug https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwq37578 

No news about a permanent fix. I will ask TAC if they can escalate to BU.

/Chess

[Loebmann]

I no longer have any problems with the LSP update with 7.7.10, but I am not using any cloud services.

I found the following bug:
“FMC cannot fully use licensed features requiring Talos Cloud Services when using air-gapped or evaluation licensing - CSCwr23982”
https://bst.cloudapps.cisco.com/bugsearch/bug/CSCwr23982

This affects 7.6.1/7.6.2 and 7.7.10.

[Loebmann]

The certificate under “openssl x509 -text -in /var/sf/beaker3/securefirewall-dev-prod-01_prod.pem” is currently valid until October 14, 2025, at 4:14 p.m. Let's see if problems arise after that or if it is updated properly.

[Loebmann]

No sooner has the certificate expired than the messages start coming in again

[Ditter]

@Loebmann In my case i just checked it says:

Validity
Not Before: Sep 14 16:32:06 2025 GMT
Not After : Sep 13 16:32:06 2026 GMT

So i see it is valid up to 13 of Sep 2026.   

But i get several warnings occasionally (my last message was on 18 of Sep 2025) but i firmly believe that they will come back

Module: Talos Communication
Description: 1 modules failed:

• * LSP- Failed to retrieve beaker inventory

Ditter