Symptom

1. On the FMC, we see the following health warnings within the Threat Data Updates on Devices: Cisco Cloud Configuration - SSE enrollment failure Within the FTD CLI in /etc/sf the connector.toml file was empty. root@firepower:/#cd /etc/sf/ root@firepower:/etc/sf# ls -lah | grep -i toml -rw-r--r-- 1 www www 0 Feb 27 16:56 connector.toml <<<<<<<<<<<<< EMPTY FILE And/OR 2. FMC may also show "FMC Health Alert "SSEConnector has exited X time(s)." health alert for an FTD exhibiting this issue. SSE website shows sensor as Registered with Cloud Connectivity as "X days ago," corresponding to when the process stopped working.

Conditions

May occur after a power outage on the sensor, or possibly at other times.

Workaround

Copy contents of /etc/sf/connector.toml from a working sensor in customer network to the impacted sensor. Then run following commands to restart service: sudo pmtool disablebyid SSEConnector sudo pmtool enablebyid SSEConnector

Further Problem Description