Defense Center generates alerts on "URL filtering download failure"

[Nazmul Rajib]

I am receiving the following health alerts continuously on my Sourcefire Defense Center running software version 5.2. How can I stop this alert?

URL filtering download failure

[it-management]

Hm...ok, we've set the proxy at the Firepower, for weeks... so it seems, i need to open a ticket... :-/

[Aastha Bhardwaj]

Hi ,

Try this :

Escalate the privilege to root on Defense center : sudo su

Root > curl –vvk database.brightcloud.com
Root> curl –vvk service.brightcloud.com

See what do you get , also check /var/log/messages and you will see errors related to cloud lookups . For proxy the IP of the Firesight Manager and the sensor need to be whitelisted on the proxy.

Regards,

Aastha Bhardwaj

Rate if that helps!!!

[Muhammad.Eissa]

 i have the same issue , i am running 6.0.1

also i get this from the  syslog for some connectons

Sinkhole: Unknown, URLCategory: Unknown, URLReputation: Risk unknown

[Michael Proctor]

I have this issue also, 5506 running 6.01.  Did anyone ever get a resolution?