Contents

Issue

In a deployment of Secure Firewall Threat Defense (FTD) devices managed by Secure Firewall Management Center (FMC), scheduled automatic FTD backups fail to appear on the configured SFTP server. Manual FTD backups and FMC backups to the same SFTP server succeed. This results in lack of availability of automated FTD configuration backups for disaster recovery and compliance purposes.

Environment

- FTD 7.4. Other software versions can be also affected.

- FMC 7.7. Other software versions can be also affected.

- SFTP server configured for backup storage.

Resolution

The resolution involves modifying the scheduled FTD backup task configuration in the FMC to enable proper backup retrieval and export functionality.

Step 1: Access the Scheduled FTD Backup Task in FMC

Navigate to the FMC UI (Tools > Scheduling) and locate the existing scheduled FTD backup task that is configured but not successfully uploading backups to the SFTP server.

Step 2: Edit the scheduled backup task configuration

Edit the scheduled FTD backup task configuration and enable the "Retrieve to Management Center" option. This option ensures that the backup is first retrieved to the FMC before being exported to the configured SFTP server.

Step 3: Allow the scheduled backup task to execute

After making the configuration change, allow the scheduled backup task to run according to its configured schedule to test the modified configuration.

Step 4: Verify backup retrieval and export

Verify that the backup is successfully retrieved to the FMC and then properly exported to the configured SFTP server.

Step 5: Test and validate results

Monitor subsequent scheduled backup executions to ensure consistent operation and validate that the automated FTD backup process is functioning as expected.

Cause

The scheduled FTD backup task was not configured with the "Retrieve to Management Center" option enabled. Without this option scheduled FTD backups are not retrieved and not sent to the remote server. Manual backups are not affected by this option.

Related Content

- Cisco Technical Support & Downloads

- Cisco bug ID CSCwv85459