ESA 370 alerts, need clarification.

[bsrinu001]

Hi Team, 

we are getting the below alerts: 

1) work queue paused, 57 msgs, antivirus

 Version: 9.1.0-032

Serial Number: XYZ

Timestamp: 10 Nov 2017 14:54:13 +0000

2) The Warning message is:

 Error connecting to cluster machine telent (Serial #: XYZ) at IP 10.10.111.11 - Connection failure - [Errno 65] No route to host

 Version: 9.1.0-032

Serial Number: XYZ

Timestamp: 10 Nov 2017 14:42:25 +0000

3)The Warning message is:

 Error connecting to cluster machine (Serial #: XYZ ) at IP  10.12.111.11- Operation timed out - Timeout connecting to remote cluster host

 Version: 9.1.0-032

Serial Number: XYZ

Timestamp: 10 Nov 2017 14:45:42 +0000

4)The Warning message is:

Error connecting to cluster machine esahost.name at IP 13.20.70.11 - Connection failure - [Errno 61] Connection refused

5)Unable to connect to Cisco Web Security Service.

URL Filtering will not work correctly.

Please verify all network, proxy and firewall settings.

Connection to "v2.sds.cisco.com" failed.

The last error seen on this connection: "Server busy or service unavailable"

Please clarify to the earliest. Many Thanks in avdvance!!

[Libin Varghese]

Hi,

Workqueue paused errors are explained in the below link:

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118303-technote-esa-00.html

Alerts 2,3 and 4 show cluster communication issues and it is recommended you confirm cluster connectivity using command "clusterconfig" followed by "communication" or "connstatus".

Depending on if you use port 22 or 2222 for cluster communication you can perform telnet from one appliance to another to ensure connectivity.

Alert 5 could be transient issue with the appliance not being able to connect to the URL filtering server due to network issues at the time. Ensure URL filtering is configured as per below field notice:

www.cisco.com/c/en/us/support/docs/field-notices/641/fn64111.html

You can also confirm current connectivity using telnet.

telnet v2.sds.cisco,com 443

Regards,

Libin Varghese

[bsrinu001]

Hi, 

Could you please clarify the below Error and recommendations for the same.

Error: 

An application fault occurred: ('egg/varstate.py _load_state|77', "<type 'exceptions.EOFError'>", '', '[egg/hermes.py run|157] [egg/hermes.py _run2|740] [egg/varstate.py init|29] [egg/varstate.py _load_state|77]') argv: ['hermes.pyo']

[Libin Varghese]

This has been answered on your recent post.

https://supportforums.cisco.com/t5/email-security/critical-message-an-application-fault-occurred-egg-varstate-py/td-p/3216488

- Libin V