We have a problem, esa unable comunicate with update server

[accessbank2012]

The Warning message is:

The updater has been unable to communicate with the update server for at least 1h.

Last message occurred 8 times between Tue Jul 16 14:32:25 2024 and Tue Jul 16 15:21:54 2024.

Version: 14.2.2-004

[ccieexpert]

this could be a intermittent issue at the update site or something on your side.. have you seen it for a longer duration ?

this document explains in more detail how to force an update and also the logs that might indicate what is going on.

https://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/117854-technote-esa-00.html

you can also look at firewall logs to see if there is a connection going through during that time or if a tcp 3 way didnt get established.. Additionally you can also enable packet capture when do you a manual update to see what is happening to the tcp flow and might give you hints to what the problem.. hopefully i have given you some ideas.

If this was useful dont forget to mark as helpful..

[saliyev]

1) you might hit following defect. please check this.  https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvn51625

2) also check following connections through ESA's CLI:
  telnet update-manifests.sco.cisco.com 443
  telnet downloads.ironport.com 80
  telnet updates.ironport.com 80

3) check firewall traffic logs for L3-4 and Application/File Control if it is NGFW.