Solved: ESA - sophos antivirus - The Anti-Virus database on this system is Expired

braulio.castigo1 · ‎08-04-2017

Hi there I can´t update my Sophos Anti-virus, I tried to force by issuing this command:

>antivirusupdate force

But no success

Do you guys have any other way beside opening a case

    SAV Engine Version        3.2.07.363.1_5.22 (expired)
    IDE Serial                2016030900
    Last Engine Update        12 Jan 2016 19:22 (GMT +00:00)
    Last IDE Update           09 Mar 2016 00:35 (GMT +00:00)

Sophos Anti-Virus updates:
Requesting forced update of Sophos Anti-Virus.

Press Ctrl-C to stop.
Fri Aug 4 11:45:26 2017 Info: cloudmark waiting for new updates
Fri Aug 4 11:45:26 2017 Info: postx waiting for new updates
Fri Aug 4 11:45:26 2017 Info: timezones waiting for new updates
Fri Aug 4 11:45:26 2017 Info: sophos waiting for new updates
Fri Aug 4 11:45:26 2017 Info: mcafee waiting for new updates
Fri Aug 4 11:45:26 2017 Info: openssh_key waiting for new updates
Fri Aug 4 11:45:26 2017 Info: repeng waiting for new updates
Fri Aug 4 11:45:26 2017 Info: Received remote command to signal a manual update
Fri Aug 4 11:45:26 2017 Info: Starting manual update
Fri Aug 4 11:45:28 2017 Info: Scheduled next update to occur at Fri Aug 4 11:5                                                                0:28 2017
Fri Aug 4 11:50:28 2017 Info: Starting scheduled update
Fri Aug 4 11:50:29 2017 Info: Scheduled next update to occur at Fri Aug 4 11:55:29 2017

I forced the update many times and no result.

How can you help me fixing this.

Thanks in Advance!

Libin Varghese · ‎08-04-2017

What is the Async OS on the appliance?

Do note end of life releases of Async OS do not receive newer updates from Cisco servers.

If the Async OS is not end of life it would be recommended you confirm connectivity to the Cisco update servers using the below telnet commands.

telnet update-manifests.ironport.com 443

telnet updates.ironport.com 80

telnet downloads.ironport.com 80

- Libin V

View solution in original post

Libin Varghese · ‎08-04-2017

Yes, upgrade to Async OS 8.5 or above should help get newer updates.

From the output I also see the RAID status is Degraded which would suggest a hardware failure in one of the disks. I would recommend opening a TAC case to get the disk replaced if the device is under contract.

- Libin V

View solution in original post

Libin Varghese · ‎08-04-2017

What is the Async OS on the appliance?

Do note end of life releases of Async OS do not receive newer updates from Cisco servers.

If the Async OS is not end of life it would be recommended you confirm connectivity to the Cisco update servers using the below telnet commands.

telnet update-manifests.ironport.com 443

telnet updates.ironport.com 80

telnet downloads.ironport.com 80

- Libin V

braulio.castigo1 · ‎08-04-2017

Hi Libin V

Thanks,

Mine is EOF

Current Version
===============
UDI: C170 V04 FCZ1738N00E
Name: C170
Description: Cisco IronPort C170
Product: Cisco IronPort C170 Messaging Gateway(tm) Appliance
Model: C170
Version: 7.6.3-019 - end of life was December 31, 2015
Build Date: 2013-06-09
Install Date: 2015-06-04 10:20:57
BIOS: 9B1C118A
RAID: 02
RAID Status: DEGRADED-
RAID Type: 1
BMC: 2.03

An upgrade to a version 8.5.6 or higher can solve the problem?

The results of the command that you gave:.

Trying 208.90.58.5...
Connected to update-manifests.ironport.com.
Escape character is '^]'.
^[
HTTP/1.1 403 Forbidden
Server: Submission portal
Date: Fri, 04 Aug 2017 13:37:45 GMT
Content-Type: text/html
Content-Length: 169
Connection: close

<html>
<head><title>403 Forbidden</title></head>
<body bgcolor="white">
<center><h1>403 Forbidden</h1></center>
<hr><center>nginx/1.10.3</center>
</body>
</html>
Connection closed by foreign host

Thanks once again for your time

Libin Varghese · ‎08-04-2017

Yes, upgrade to Async OS 8.5 or above should help get newer updates.

From the output I also see the RAID status is Degraded which would suggest a hardware failure in one of the disks. I would recommend opening a TAC case to get the disk replaced if the device is under contract.

- Libin V

braulio.castigo1 · ‎08-04-2017

Thanks Libin V.

The device is no longer under a valid contract.

But I will do the upgrade and try to have this under a contract or something else.

Thanks for you time!

Regards

Bráulio Castigo

Libin Varghese · ‎08-04-2017

Do note that it is not recommended to upgrade the appliance with a faulty hard disk.

Just as a side note.

- Libin V

braulio.castigo1 · ‎08-04-2017

Ok Libin V

Duly noted!

Bráulio Castigo