Symptom

Connection events that are received from a device may not have correctly resolved category names in the URL category field.

Conditions

Managed devices that are generating connection events that match URL categories that are new at the FMC but are unknown at the device. FMC UI will be unaffected because FMC metadata is updated, but events received via syslog, sse, stealthwatch will not have new categories.

Workaround

Manually transfer /var/sf/cloud_downloads/aup_categories.json and /var/sf/cloud_downloads/

Further Problem Description