11-28-2016 08:41 PM
Hello
I've got an error:
Unable to connect to Cisco Web Security Service.
URL Filtering will not work correctly.
Please verify all network, proxy and firewall settings.
Connection to "v2.sds.cisco.com" failed.
The last error seen on this connection: "Request failed with code: 77 (error setting certificate verify locations:
CAfile: /data/share/trustedca.pem
CApath: none)"
Version ESA: 10.0.0-203
What is a reason of this error?
11-29-2016 06:09 AM
Hi,
Based on the error, it sounds like the appliance may either not be receiving a certificate back from the update servers that it trusts.
We could first try to correct the issue by running the following commands on the Command Line Interface (CLI):
ecupdate force
* Wait about 5 minutes for the appliance to attempt to complete the update and then run the status command:
ecstatus
Please provide us with the output from these commands, and see if the forced update corrects the issue.
If you are still receiving the errors afterwards, please provide us with the following information:
* Do you know if the ESA is using a proxy? (Transparent or Explicit)
- You may need to speak with your networking team to verify that you are not, as you may be going through a transparent proxy unknowingly.
Thanks
Libin Varghese
11-29-2016 05:27 PM
Hi,
I did it and after running command ecstatus received the output:
Component Version Last Updated
Enrollment Client 1.0.2-065 30 Nov 2016 01:14 (GMT +00:00)
There weren't any errors during executing the command.
ESA doesn't use a proxy
11-30-2016 05:11 AM
Hi,
Please continue to monitor to see if there are any further similar alerts.
If you continue to see further alerts I would request you to open a TAC case for further review of the device.
Thanks
Libin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide