Symptom

Deployment failure with all devices running snort 3 ========= INFRASTRUCTURE MESSAGES ========= DeploymentException:Mar 31 15:56:36 Process Manager failed to secure LSP APPLY_APP_CONFIG_APPLICATION_FAILURE SignalAppConfigFailed: Please refer policy_deployment.log file for more details; Rollback APP was successful. errors Mar 31 14:05:35 ftd2 policy_apply.pl[38160]: ERROR Process Manager failed to verify LSP ICDB (Snort::SnortUtil 290 <- LSP::Device 211 <- Plugin 235) Mar 31 14:05:35 ftd2 policy_apply.pl[38160]: ERROR ERROR: Process Manager failed to secure LSP (/ngfw/var/cisco/deploy/sandbox/exporter-pkg/code/SF/UMPD/Plugins/Snort/SnortUtil.pm line 291) (Framework 1482<1240 <- Transaction 1772 <- main 214) Mar 31 14:05:35 ftd2 policy_apply.pl[38160]: ERROR Process Manager failed to secure LSP at /ngfw/var/cisco/deploy/sandbox/exporter-pkg/code/SF/UMPD/Plugins/Snort/SnortUtil.pm line 291. (Framework 1487<1240 <- Transaction 1772 <- main 214)

Conditions

managed device using snort 3

Workaround

downgrade to snort 2 or (in case of vFMC) increase the memory to 48 or 64 GB

Further Problem Description