Failure to download sourcefire intelligence feed

[Colin Higgins]

I have a Cisco Firesight Appliance that is getting the following error

Soucefire_Intelligence_Feed received code (unable to download file)

since updating the system to 5.4.1.8

I went through all the troubleshooting steps outlined in this document

http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/117997-technote-firesight-00.html

and everything appears fine. No issues resolving intelligence.sourcefire.com or doing a curl command, etc.

Firewall is open to this host (nothing has changed there)

Is anyone else having this issue? What is going on?

[pdemeyerhlc]

I am having this exact same issue after the 5.4.1.8 upgrade.  I am able to get rule and geo-location updates without issue.  It seems the Security Intel feeds were the only thing effected.

[Colin Higgins]

yep: I can get the geo-location and rule updates, but not the security intel.

I changed the DNS settings, but that didn't help either

[gamoore · Accepted solution]

I had this problem as well. I opened a TAC Case with Cisco and they said it is a new bug (CSCvb70107). That was on Wednesday 10/12/2016. I got a feed update today without making any changes on my system.

Problem must have been with the Security Intelligence feed host.