For the last two days days, I've been getting this email from our ESA appliance.
The Warning message is:
The updater has been unable to communicate with the update server for at least 1h.
Last message occurred 8 times between Thu May 28 21:25:22 2020 and Thu May 28 22:14:33 2020.
Version: 13.0.0-392
Serial Number: 4220E354B51E18377F43-3601292ED790
Timestamp: 28 May 2020 22:20:54 -0500
To learn more about alerts, visit our support community and troubleshooting site. In many cases, you can find more information about this specific alert.
For troubleshooting, see the following URL :
https://www.Cisco.com/c/en/us/support/security/email-security-appliance/products-tech-notes-list.html
For ESA Support, see the Cisco Support Community site :
https://supportforums.cisco.com/t5/email-security/bd-p/5756-discussions-email-security
If you desire further information, please contact your support provider.
To open a support request for this issue, access the IronPort C100V
and issue the "supportrequest" command. The command sends an email with
diagnostic information directly to Cisco IronPort Customer Support to
facilitate a rapid diagnosis of the problem.
Thank you.
Is there a known issue going on?
If not, then I'm unsure how to troubleshoot this... Is it possible that it's related to a licensing issue? Right before I started getting the above messages hourly, I got a different message from the ESA that said my licenses had expired. It was referencing the old style "paste in a license" that I had on the ESA. When we renewed our licenses earlier this year, we converted the appliance to Smart Licensing. I just checked it's license page and it says everything is authorized and the entitlements are good but it still sent me an email about the old "paste in" license having expired and gave me warning about services no longer working. So I'm not sure now if the ESA went into an unlicensed state under the hood, even though the Smart Licensing says it is valid.
This was the message telling me all about licenses expiring even though the Appliance's Smart Licensing page says all is good. And I converted to Smart Licensing well before these emails started.
The Critical message is:
All security services licenses for this Cisco Email Security Appliance have expired. The appliance will continue to deliver mail without security services for 180 days, until 2020/11/23.
To renew security services licenses, Please contact your authorized Cisco sales representative.
Version: 13.0.0-392
Serial Number: 4220E354B51E18377F43-3601292ED790
Timestamp: 27 May 2020 10:06:52 -0500
To learn more about alerts, visit our support community and troubleshooting site. In many cases, you can find more information about this specific alert.
For troubleshooting, see the following URL :
https://www.Cisco.com/c/en/us/support/security/email-security-appliance/products-tech-notes-list.html
For ESA Support, see the Cisco Support Community site :
https://supportforums.cisco.com/t5/email-security/bd-p/5756-discussions-email-security
If you desire further information, please contact your support provider.
To open a support request for this issue, access the IronPort C100V
and issue the "supportrequest" command. The command sends an email with
diagnostic information directly to Cisco IronPort Customer Support to
facilitate a rapid diagnosis of the problem.
Thank you.
