topic Re: Threat grid update failure in Endpoint Security

Threat grid update failure

Qingguo Zhang — Sat, 09 Mar 2019 01:48:59 GMT

I am having a issue to update threat grid in lab , it shows the following error when doing update.

ssh: connect to host appliance-updates.threatgrid.com port 22: No route to host Failure during transfer

Dirty interface is able to ping internet and DNS is resolvable.

Any comments is appreciated.

Re: Threat grid update failure

Matthew Franks — Fri, 08 Feb 2019 19:44:33 GMT

If you're able to resolve appliance-updates.threatgrid.com, you might have something in your lab blocking traffic to that IP on port 22. Check routes to see if the IP that resolves is routable and nothing is blocking on port 22.

Thanks,

Matt

Re: Threat grid update failure

Jetsy Mathew — Sun, 10 Feb 2019 04:52:28 GMT

Hello Zhang

I have recently come across a similar issue and as Matt suggested the error will be mostly caused by network level block. Most of the time we just allow the traffic in firewalls for the upgrade server and it should work but if you have any intermediate devices in between the TG and your firewall then it can also cause the same issue. Try running tracert command in any client which is in the same network as your TG and see which is the next hop and whether its reaching the destination specified.

Regards

Jetsy

Re: Threat grid update failure

Qingguo Zhang — Sun, 10 Feb 2019 06:54:41 GMT

Thanks for you answer.

It seems corporate network has some limitation to reach update site. my threatgrid was in lab network.

is there any ways to do offline upgrade ?

Re: Threat grid update failure

Qingguo Zhang — Sun, 10 Feb 2019 06:55:25 GMT

Thanks for you answer.

It seems corporate network has some limitation to reach update site. my threatgrid was in lab network.

is there any ways to do offline upgrade ?

Re: Threat grid update failure

Jetsy Mathew — Sun, 10 Feb 2019 07:04:42 GMT

Hello Zhang

You can refer the following article for offline update process.

https://www.cisco.com/c/dam/en/us/td/docs/security/amp_threatgrid/threat-grid-appliance-offline-update-process.pdf

Regards

Jetsy

Re: Threat grid update failure

Qingguo Zhang — Sun, 10 Feb 2019 08:24:18 GMT

thanks，could you advise where to download the latest release?