Unable to deploy Policies from Primary unit(FMC)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-03-2021 07:25 AM - edited 02-03-2021 08:49 AM
HI,
I have Firepower (FTD) in HA managed through a standalone FMC, There is a peculiar issue, Whenever my Primary unit is active and I deploy , I get the error " Deployment failed due to communication Error", So I have to switch over to secondary unit to deploy and get the successful deployment.
I don't have any issue while doing deployment when Secondary unit is active , What could be the issue,
Thanks
Bibek
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
02-03-2021 01:47 PM
Could be a variety of possible issues. First of all I'd verify connection between your primary firewall and FMC. If possible I'd recommend a reboot of the primary, but in case you do not want to reload you can go ahead and use pmtool to restart sftunnel (communication channel between FMC and FTD) and/or ngfwManager (process that handles deployment on FTD side).
From FTD CLI
> pmtool restartbyid sftunnel
> pmtool restartbyid ngfwManager
In case the issue still occurs you can use pigtail on FMC and FTD to gather more information on the error and upload it here so I can take a look. You can use the following command from FTD SFCLI and FMC root shell
> pigtail deploy
Hope that helps
