The updater has been unable to communicate with the update server for at least 1h

[abillings2]

Our IronPort systems have begun generating system alerts reading "The updater has been unable to communicate with the update server for at least 1h" roughly every hour.

I have tried the "antispamupdate ironport force" and "antivirusupdate force" commands, but these have had no effect on the problem.

[Robert Sherwin]

Hardware appliance or virtual appliance?

Are you able to telnet to the needed dynamic host?  update-manifests.ironport.com 443 for hardware, update-manifests.sco.cisco.com 443 for virtual.

> telnet update-manifests.ironport.com 443

or

> telnet update-manifests.sco.cisco.com 443

Any DNS issues, network issues on your side?  Are you able to dnsflush to clear out cached DNS entries?

What is updater_logs showing post updatenow force being issued on the CLI?  Do the following:

> updatenow force

> tail updater_logs

Watch the logs for a minute or so, see if connection made out, success or fail?

-Robert 

[Mathew Huynh]

Hello,

I would also suggest trying connection to:

telnet updates.ironport.com 80

telnet downloads.ironport.com 80

Regards,

Matthew