topic Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports in Web Security

Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

CP2 — Sat, 09 Mar 2019 03:43:21 GMT

Hello folks. I have an old C170 that is out of contract and end of life. It was working fine for a few years up until this week. I received a few e-mails this morning from the C170 saying "A failure occurred while building periodic report 'Internal Users Daily Report'." SO naturally I go to login to the webGUI, but I get an error:

ERROR RESPONSE ERROR Code 500: Server got itself into trouble: The application raised an exception.

So I am only able to access the CLI. I am not a pro or even intermediate level on these devices, so can someone assist on my courses of action? I did the DISK_USAGE command, but nothing seems too out of wack there.

Services                      Disk Usage (GB)   Quota(GB)
----------------------------------------------------------
Spam Quarantine                       0.0           1.0
Reporting                             1.5           8.5
Tracking                              9.6          10.0
Total                                11.1          19.5

I did a reboot on it and it came back up fine. I can ping the device as well. I just can get to the webGUI for easier troubleshooting.

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

OlegB — Thu, 25 Jan 2018 08:07:06 GMT

In my case, the reboot does not help. GUI is unavailable.
It happened at midnight on 24-01-2018

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

CP2 — Thu, 25 Jan 2018 14:01:48 GMT

In looking at the gui_logs, I see an error that could be key into getting the GUI part fixed:

Thu Jan 25 08:36:07 2018 Info: req:xxx.xxx.xxx.xxx user:- id:- 500 GET / HTTP/1.1 -
Thu Jan 25 08:36:07 2018 Critical: Error in http connection from host xxx.xxx.xxx.xxx port 60004 - timestamp out of range for platform time_t

Anyone have any clues based on that error?

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

pktoon — Fri, 26 Jan 2018 14:36:53 GMT

Hello, i'm facing to the same issue with my S170 WSA "Error Response : Error code 500: Server got itself in trouble: The application raised an exception. " since 24 january

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

TANECO Admins — Mon, 29 Jan 2018 11:13:06 GMT

We also have EOL old product (but it' works fine!), and have some problem 😞

Product: Cisco IronPort C150 Messaging Gateway(tm) Appliance
Model: C150
Version: 7.5.2-014
Build Date: 2012-03-06
Install Date: 2012-03-06 23:35:48

I think, cause maybe in internal date/time variables of AsyncOS. If set date/time manually, for example, to 12/30/2017 - GUI works correctly.

UPDATE

Upgrade AsyncOS to latest possible version resolve the problem:

Product: Cisco IronPort C150 Messaging Gateway(tm) Appliance
Model: C150
Version: 7.6.3-019
Build Date: 2013-06-09
Install Date: 2018-01-29 14:04:14

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

TANECO Admins — Mon, 29 Jan 2018 11:14:16 GMT

Quick upgrade procedure (including command line via SSH):

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118547-technote-esa-00.html

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

CP2 — Mon, 29 Jan 2018 13:10:17 GMT

But does the upgrade work if the device is EOL? Am I able to download and install from an external source instead of a prompt in the Async OS?

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

CP2 — Mon, 29 Jan 2018 13:11:26 GMT

My system is already on 7.6.3, so I am wondering if that was the last available upgrade for the device.

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

TANECO Admins — Mon, 29 Jan 2018 14:15:22 GMT

Yes, you can upgrade (I did it from command line).

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

fernando christian Phangestu — Tue, 30 Jan 2018 04:26:21 GMT

have anyone open this case with TAC ? if yes please share the result.

looks like a new year surprise bug

thanks

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

berihun — Wed, 31 Jan 2018 12:01:56 GMT

Hi the same problem happened on my appliance i cant login using GUI..but CLI what is the reason guys ? Error Response Error code 500: Server got itself in trouble: The application raised an exception.

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

CP2 — Wed, 31 Jan 2018 20:14:10 GMT

What version of AsyncOS are you running? I talked to a cisco rep and they told me to do an upgrade. Problem is that I can't get anything higher than 7.5.2. So she was trying to point me to a different OS repository. If she comes through and helps me today I will report back with my findings.

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

berihun — Thu, 01 Feb 2018 06:03:21 GMT

Thank you for your prompt feedback

version is 7.1.3 and i was trying to update it from CLI but it notifies me their is no applicable upgrade for this appliance.plus to that i am afraid it will not support the latest OS because its RAM is 4G.

may be the problem is related to Certificate (SSL) outdated or didn't get the issuer (CA) ?

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

joshbeen1 — Thu, 01 Feb 2018 12:46:36 GMT

I also hit this issue today, running AsyncOS 7.1.3.

At this point, I'm only using the box as an outgoing relay for a few copiers and alias email addresses.

If anyone has a suggestion for a purpose built box for a low-volume outgoing relay that would allow me to retire this EOL IronPort, I'd appreciate it.

Regards,

Josh

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

TANECO Admins — Thu, 01 Feb 2018 12:48:37 GMT

It’s not SSL. I checked this version. I turned https access off on management interface – via http a got same error.

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

CP2 — Thu, 01 Feb 2018 13:10:21 GMT

You won't able to get the latest which is like 11.1.0, but I believe you can still get up to 8.x.x or something maybe even 9.x.x. But the 7.x.x that we are stuck on is lame.
In your updateconfig command see if you can change the update source to

update-manifests.ironport.com 443
update-manifests.ironport.com 80

The tech I was working with said that this is where I should be trying to get my updates from now since the old source is dated.

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

Stan Huang — Fri, 02 Feb 2018 02:30:57 GMT

Which firmware version do you use?

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

berihun — Sat, 03 Feb 2018 06:55:08 GMT

Hi Stahuange

Not sure about the the diffrence between Firmware and OS version

but ths OS version is 7.1.3-014

here it is the output for IPCHECK on CLI may be it will help u to find the Firmware version

Model S370
Platform R710 (80AE)
LCD Setting custom
LCD Text Cisco IronPort S370
WSA Version Version: 7.1.3-014
Build Date 2011-09-07
Install Date 2012-11-01 09:55:11
Burn-in Date Unknown
Serial No. 842B2B5008D1-HJGQY4J
BIOS Version 0.0.1C
RAID Version 1.21.02-0528, 2.01.00, 1.02-014B
RAID Status Optimal
RAID Type 10
RAID Chunk Unknown
BMC Version 1.00

Disk 0 418GB SEAGATE ST3450857SS ES643SK1XFNM
Disk 1 418GB SEAGATE ST3450857SS ES643SK1WK1V
Disk 2 418GB SEAGATE ST3450857SS ES643SK1WLXL
Disk 3 418GB SEAGATE ST3450857SS ES643SK1X661
Disk 4
Disk 5
Disk 6
Disk 7
Disk Total 1672GB

Root 2GB 17%
Nextroot 2GB 17%
Var 400MB 1%
Log 522GB 97%
DB 2GB 0%
Swap 8GB
Proxy Cache 300GB

RAM 1 A Empty
RAM 1 B Empty
RAM 2 A 1024M ECC 1333MHz
RAM 2 B Empty
RAM 3 A 1024M ECC 1333MHz
RAM 3 B Empty
RAM 4 A Empty
RAM 4 B Empty
RAM 5 A 1024M ECC 1333MHz
RAM 5 B Empty
RAM 6 A 1024M ECC 1333MHz
RAM 6 B Empty
RAM 7 A Empty
RAM 7 B Empty
RAM 8 A Empty
RAM 8 B Empty
RAM 9 A Empty
RAM 9 B Empty
RAM Total 4G

CPU 1 Xeon 2.266G 5860FSB 1M Cache
CPU 2 Empty

PCI 1 PCI-e g2 x8, 4x Empty
PCI 2 PCI-e g2 x8, 4x Empty
PCI 3 PCI-e g2 8x Empty
PCI 4 PCI-e g2 8x Installed

NIC Management 00:10:18:76:fe:07, NetXtreme Gigabit Ethernet PCI Express (BCM5721)
NIC P1 84:2b:2b:50:08:d1, NetXtreme II Gigabit Ethernet (BCM5709)
NIC P2 84:2b:2b:50:08:d3, NetXtreme II Gigabit Ethernet (BCM5709)
NIC T1 84:2b:2b:50:08:d5, NetXtreme II Gigabit Ethernet (BCM5709)
NIC T2 84:2b:2b:50:08:d7, NetXtreme II Gigabit Ethernet (BCM5709)

PS1 Unknown
PS2 Unknown

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

berihun — Mon, 05 Feb 2018 06:23:07 GMT

Hi,

you didn't get any info from the output ?

Re: Cisco Ironport C170 - Cannot access WebGUI and problems with creating reports

CP2 — Mon, 05 Feb 2018 13:36:28 GMT

The problem has been solved by doing a system update. I was able to update the system all the was from 7.5.2 to 11.0.1. If you try to upgrade from 7.5.2 to 7.6.2 instead of 7.6.1 then you might run into problems. So try upgrading to 7.6.1 instead. Seems that in the 7.0.0 series that it didn't like to skip releases in the upgrade path. Once I was able to get to 8.x.x then I could go full iteration upgrades. Like from full 8, to full 9, to 10, to 11. Each subsequent upgrade on my network speed took about 20 minutes. The download part wasn't the lengthy part. The reboot was the lengthy part. Good luck with your upgrades!