Ironport C650. Sophos Anti-Virus Engine update error

[rosbank.cisco-reg]

Hello.

Today 15 May 2013. But Sophos Antivirus doesn't update. Current version is 4.89

Sophos Anti-Virus Engine     4.87     23 Mar 2013 00:53 (GMT)

In the logs we see:

Sun May 12 03:28:33 2013 Warning: Sophos: Error transferring sophos.ini?version=7.1.1&model=C650&serial=xxx&sophos_engine=4.87&sophos_ide=2013051103: I/O error opening URL 'http://downloads.ironport.com/av/sophos.ini?version=7.1.1&model=C650&serial=xxx&sophos_engine=4.87&sophos_ide=2013051103' (Waiting 74 seconds and trying again.)

Sun May 12 03:33:33 2013 Warning: Sophos: Error transferring sophos.ini?version=7.1.1&model=C650&serial=xxx&sophos_engine=4.87&sophos_ide=2013051103: I/O error opening URL 'http://downloads.ironport.com/av/sophos.ini?version=7.1.1&model=C650&serial=xxx&sophos_engine=4.87&sophos_ide=2013051103' (Waiting 119 seconds and trying again.)

The rest (Antispam and Sophos IDE Rules) is update!

Sophos IDE Rules     2013051500     15 May 2013 00:48 (GMT)

Information:

Model: C650

Version: 7.1.1-012

Build Date: 2010-05-27

Install Date: 2010-06-30 13:40:41

BIOS: 1.2.1I

RAID: 1.00.01-0088, MT23, 1.02-007

RAID Status: Optimal

RAID Type: 10

BMC: 1.27

Why IronPort can't update Sophos Engine? How we can solve it?

Thank you.

[Doug Maxfield]

From the CLI, try "antivirusupdate force".  See if that works.  We have used it in the past when we got a bad set of updates.

[kussriva · Accepted solution]

Hi,

Please try to update the Anti-Virus using the CLI using the foll steps:

Run the following on the CLI for the appliance:
> featurekey
> CHECKNOW
> ACTIVATE (<---- if there are listed "Pending keys" from CHECKNOW)

Hit return until you are back at the main prompt.

> antivirusstatus sophos
> antivirusupdate force

Wait for 5 minutes

> antivirusstatus


Check if you see any change in the status.

To update the antispam, you can use the commands "antispamupdate ironport force" and then 
"antispamstatus"


For further assistance on pre-production issues, you can open a case at http://www.cisco.com/web/partners/tools/pdihd.html

Regards,

Kush
Cisco PDI Help Desk
http://www.cisco.com/go/pdihelpdesk


 

[rosbank.cisco-reg]

Thank you, Kushagra.

We successfully updated Engine.

But, the SAV Engine Version doesn't update to 4.89. Why?

    SAV Engine Version        4.87

    IDE Serial                2013051701

    Last Engine Update        17 May 2013 06:04 (GMT)

    Last IDE Update           17 May 2013 06:20 (GMT)

    Last Update Attempt       17 May 2013 06:04 (GMT)

    Last Update Success       17 May 2013 06:04 (GMT)

[Stephan Bayer]

Kush,

It looks like that is the latest version available for download. I tested in our lab environment and received the same result.

Tue May 21 16:08:50 2013 Info: sophos beginning download of remote file "http://updates.ironport.com/sophos/libsavi/1364488174"

Tue May 21 16:09:31 2013 Info: sophos released download lock

Tue May 21 16:09:31 2013 Info: sophos successfully downloaded file "sophos/libsavi/1364488174"

---

   SAV Engine Version        3.2.08.446_4.87

    IDE Serial                2013052106

    Last Engine Update        21 May 2013 20:09 (GMT +00:00)

    Last IDE Update           21 May 2013 20:09 (GMT +00:00)