IronPort C100v not updating/upgrading

[AntonisHadjigeorgiou86101]

Hello,

I am facing issues to update my IronPort C100v

> repengstatus

Component Last Update Version
Reputation Engine Never updated 1.2.0-079
Reputation Engine Tools. Never updated 1.2.0-079

I followed all the instructions in the https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118065-maintainandoperate-esa-00.html , however is not working.

When I run tail updater_logs I get:

Thu Feb 27 12:28:07 2020 Warning: Network Participation: failed to connect to host: update-manifests.sco.cisco.com port: 443, error: SSL error: Connection failed: <aplib.dns.SSLConnectError host="update-manifests.sco.cisco.com" port="443" errors=[TimeoutError()]
^Cironport.domain.sgc> telnet updates-static.ironport.com 443

I checked my firewall and the traffic is not Dropped. Everything passes.

What are the correct addresses for Cisco in order to run update/upgrade smoothly?

Any assistance please?

[Cristian Matei]

Hi,

    Perform nslookup from the ESA and see if those names get resolved to the proper IP address, afterwards telnet from the ESA to those IP's on those ports, and look in your firewall if you see the connection in the connection table. Being a virtual box, a reload could help as well, I've seen that behaviour on virtual appliances.

Regards,

Cristian Matei.

[AntonisHadjigeorgiou86101]

Still not working





[cid:image003.png@01D5F238.21E9D2C0]



[cid:image001.png@01D5F237.691ABA20]



[cid:image002.png@01D5F237.D2555B30]



[cid:image004.png@01D5F238.21E9D2C0]

[AntonisHadjigeorgiou86101]

Still not working

[Ken Stieers]

SSLConnect errors make me think you are using a decrypting proxy? like a WSA or FTD with decryption turned on? 

[charella]

Hello AntonisHadjigeorgiou86101,

I agree with Ken Stieers. This looks like internal network/security.
FW/Proxy/WSA proxy performing inspection/decryption on the traffic to the ESA.

This may impact you more than you realize.

Perform this test.

telnet to your ESA and monitor the banner that appears. If you get a string of *******, then you are probably decrypting your email as well. That may result in failed mail receiving.

This is a sample as I’m not sure of your domain.

telnet domainname.gr 25
Trying ip_address...
Connected to ip address….
Escape character is '^]'.
220 ************************

aplib.dns.sslconnecterror host="update

Best of luck!
Chris

[AntonisHadjigeorgiou86101 · Accepted solution]

Hello thank you all for the hints.

I didn't much after your replies due to other projects.

However, I found the solution on my issue. I added my Proxy Server settings in the System Services > Service Updates > Proxy Servers and is working fine.