McAfees Dat files are always "old" on the Cisco ESA

[Secnet DRVBundGQ]

Today we received an malicious Attachment.

The Cisco ESA was unable to recognize this attachment as an malicoius Attachment.

Virustotal.com found a Virus, even McAfee on Virustotal.com was able to find the Virus.

What i don't understand is, we also have McAfee as the main Virusscanner active on the Cisco Esa.

The last update was on "Mon Oct 8 19:08:58 2018", now it is "Tue Oct 9 16:15 2018" and there are still no new Dat-Files for McAfee , even when i click on "Update now"

There are still some emails with the same attachment in the Outbreak Quarantine, when i click on the email (same attachment)  i got this message 

Success

—

Anti-Virus scan result was: McAfee: Clean

any ideas?

[Ken Stieers]

What version of ESA are you on?

EOL versions of ESA don't get up dates.

[Secnet DRVBundGQ]

Cisco C390

Email Security Appliance

Version: 11.1.0-131

we get updates..but the frequenzy seems  a little bit to low for me

It is often a problem, when malicious attachments became the status clean, because the dat files are too old.

Mon Oct  1 18:05:01 2018 Info: mcafee successfully downloaded file "mcafee/5/dat/default_esa/1538407889"
Tue Oct  2 23:05:38 2018 Info: mcafee successfully downloaded file "mcafee/5/dat/default_esa/1538510436"
Wed Oct  3 18:06:04 2018 Info: mcafee successfully downloaded file "mcafee/5/dat/default_esa/1538579494"
Thu Oct  4 18:07:42 2018 Info: mcafee successfully downloaded file "mcafee/5/dat/default_esa/1538668022"
Sat Oct  6 18:07:39 2018 Info: mcafee successfully downloaded file "mcafee/5/dat/default_esa/1538839918"
Sun Oct  7 19:08:08 2018 Info: mcafee successfully downloaded file "mcafee/5/dat/default_esa/1538929211"
Mon Oct  8 19:08:39 2018 Info: mcafee successfully downloaded file "mcafee/5/dat/default_esa/1539014631"
Tue Oct  9 17:22:42 2018 Info: mcafee successfully downloaded file "mcafee/5/dat/default_esa/1539097443"
Tue Oct  9 18:22:43 2018 Info: mcafee successfully downloaded file "mcafee/5/dat/default_esa/1539099556"