cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2353
Views
5
Helpful
9
Replies

Using ASDM to update Firepower Rules | ASA 5506-x

errMsg
Level 1
Level 1

On my 5506-x I manage firepower with the ASDM.  Im trying to update the rules because they have never been updated.  when i navigate to Configuration>ASA firepower Configuration>Updates  and click Download Updates it says "Download updates failed: Unable to connect to update server".  I have the firepower management port cabled to a switch that has an internet connection, checked the DNS server and tried adding NAT to the interface but it still wont connect.  Can anyone point me in the right direction?

1 Accepted Solution

Accepted Solutions

So internet is confirmed reachable and the configured resolver isn't resolving an FQDN into an IP address.

Check the configured resolver and change/fix it as necessary. Instructions in the article I linked earlier.

View solution in original post

9 Replies 9

Francesco Molino
VIP Alumni
VIP Alumni
Hi
What version do you run?
When you checked dns, you checked the file /etc/resolv.conf?

Thanks
Francesco
PS: Please don't forget to rate and select as validated answer if this answered your question

Firepower 6.2.2

 

Here is the results from my resolv.conf

admin@firepower:~$ cat /etc/resolv.conf
# automatically generated by /etc/sysconfig/configure-network ; do not edit
# Mon Apr 27 22:07:32 UTC 2020
search example.net
nameserver 208.67.222.123
nameserver 208.67.220.123

Is there any proxy server in your network?

From the module cli are you able to ping a public address using its name (e.g., "ping www.cisco.com")?

I dont have a proxy

 

admin@firepower:~$ ping cisco.com
ping: unknown host cisco.com

 

admin@firepower:~$ ping 8.8.8.8
ping: icmp open socket: Operation not permitted

It appears there's not a valid name server (DNS) configured.

See this article for details on updating it:

https://www.petenetlive.com/KB/Article/0001173

The ping command requires you to switch to root superuser first:

sudo su -

Sudo doesent return anything either...

admin@firepower:~$ sudo ping cisco.com
ping: unknown host cisco.com
admin@firepower:~$ sudo pint 8.8.8.8
sudo: pint: command not found
admin@firepower:~$ sudo ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
30326


30326 30326

So internet is confirmed reachable and the configured resolver isn't resolving an FQDN into an IP address.

Check the configured resolver and change/fix it as necessary. Instructions in the article I linked earlier.

Thanks for the link Marvin.  Turns out that restarting the service allowed Firepower to connect.  

sudo /etc/rc.d/init.d/nscd restart

I did change the dns but it was restarting the nscd that got me in.

Thanks for pointing me in the right direction!

You're welcome. Thanks for letting us know it's resolved.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: