Symptom

After an FDM upgrade, when there was a deployment, there was a LSP publish. But deployment failed (some Lina trustpoint issue) and the rollback took place. The rollback deploy did roll-back to the previous LSP version. But since the rollback deploy itself failed there was a mismatch in the running snort and the installed LSP snort versions.

Conditions

FTD running 7.3.1

Workaround

As a workaround, we fixed the symlinks on /ngfw/var/sf/lsp and removed the sandbox and export cache directory from /ngfw/var/cisco/deploy manually.

Further Problem Description