Updates on Sourcefire

[Phil Bradley]

I am trying to use the download updates on the ASA firepower configuration-update screen and it keeps failing with the message "Download updates failed: Unable to connect to update server". What interface does the sourcefire module use to contact the update server? I have defined a management only interface for my ASA and the sourcefire is on this same network. Is this configurable?

[mikael.lahtela]

Hi,

It depends on your setup, are you using ASDM or FMC?
Check these links if helps you in the right direction.
https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-device-manager/200889-Using-ASDM-to-manage-a-FirePOWER-module.html

https://www.cisco.com/c/en/us/td/docs/security/asa/quick_start/sfr/firepower-qsg.html#pgfId-139878

br, Micke

[Phil Bradley]

Hi Michael,

I'm currently using ASDM to manage the firepower. I have dedicated gi1/8 as the management on the ASA and the management 1/1 is on the same network as the 1/8 interface which is tied to the sourcefire management. Typically the management interface cannot get out to the internet, so that's why I'm asking which interface does the sourcefire use to reach the internet. I'll look over the documents and see if the answer is there. Thanks!

[Phil Bradley]

Ok, so I have this working now. I ssh'd into the sourcefire box and tried basic troubleshooting commands with nslookup and telnet and was unable to resolve support.sourcefire.com. I set the DNS servers for the sourcefire box through the command line. Is it not possible to set the dns servers through ASDM? Also, it used the management interface to connect to the outside and it was getting blocked by my untangle internet filter.