Hi community,   I'm having troubling with cisco's call-home service. We are using a cisco firepower4100 series and we have followed all cisco documentation in order to correctly configure the smart software licensing. It seems a tcp handshake issue, however we did set up the trustpoints...? The following errors keep occurring whether I try to establish a connection to cisco's call-home CA or attempting to connect to our internal "Smart Software Manager Satellite" server:   info: 192.168.1.100 = Internal Satellite Server! *************************************************************************************************************************** FIREWALL# call-home test profile CiscoTAC-1 INFO: Destination callhome@cisco.com skipped. Transport method email is not enabled. INFO: Sending test message to https://tools.cisco.com/its/service/oddce/services/DDCEService... telnet/ci: processing test(Test) SCH Configuration Test telnet/ci: [0] dispatching test message to https://tools.cisco.com/its/service/oddce/services/DDCEService telnet/ci: Dispatch to destination https://tools.cisco.com/its/service/oddce/services/DDCEService telnet/ci: Opening dispatch channel: httpc/4/72.163.4.38/443/ssl/verify/sch// telnet/ci: Opened dispatch channel: httpc/4/72.163.4.38/443/ssl/verify/sch// telnet/ci: upload 2795 bytes ERROR: Failed: CONNECT_FAILED(35) INFO: Sending test message to https://192.168.1.100:443/Transportgateway/services/DeviceRequestHandler... telnet/ci: http request to https://tools.cisco.com/its/service/oddce/services/DDCEService failed, rc -1 telnet/ci: [0] Dispatch message(124) test to https://tools.cisco.com/its/service/oddce/services/DDCEService failed: CONNECT_FAILED(35) telnet/ci: [0] dispatching test message to https:// 192.168.1.100 :443/Transportgateway/services/DeviceRequestHandler telnet/ci: Dispatch to destination https:// 192.168.1.100 :443/Transportgateway/services/DeviceRequestHandler telnet/ci: Opening dispatch channel: httpc/2/ 192.168.1.100 /443/ssl/verify/sch// telnet/ci: Opened dispatch channel: httpc/2/ 192.168.1.100 /443/ssl/verify/sch// telnet/ci: upload 2804 bytes ERROR: Failed: CONNECT_FAILED(35) FIREWALL# telnet/ci: http request to https://192.168.1.100:443/Transportgateway/services/DeviceRequestHandler failed, rc -1 telnet/ci: [0] Dispatch message(125) test to https://192.168.1.100:443/Transportgateway/services/DeviceRequestHandler failed: CONNECT_FAILED(35)  *************************************************************************************************************************** Furthermore we are using the Smart Software Manager Satellite (ssms) version 5.1. Unfortunately http (port 80) has been removed and this cannot be modified on the internal ssms cli server. Connection can only be established through https (443).     Trustpoint created to internal satellite server:   ************************************************************************************************************************** CA Certificate Status: Available Certificate Serial Number: 1234 Certificate Usage: General Purpose Public Key Type: RSA (2048 bits) Signature Algorithm: SHA256 with RSA Encryption Issuer Name: cn=TG SSL CA o=Cisco c=US Subject Name: cn=192.168.1.100 ou=TC o=Cisco l=SJ st=CA c=ZZ Validity Date: start date: 15:21:48 UTC Nov 12 2018 end date: 15:21:48 UTC Nov 12 2033 Storage: config Associated Trustpoints: smart_satellite **************************************************************************************************************************   BTW Call Home CA Trustpoint is pre-configured   Any ideas?   ... View more

Hi, I am planning on implementing location-based services. Cisco ISE, WLC & Prime are the current servers which are interconnected. The Access Points are fairly spread around the campus and all necessary rules are defined on the ISE. So my the Question is: Are there any alternatives to cisco mobility service engine in order to get the location based services working?  Can Cisco Prime Infrastructure not serve as my location Server? ... View more