Firesight URL Monitoring Filter cloud lookup failure

[ibrahim_sms]

I'm getting this error continuously on my firesight management center.

However I can not think of why is it always generating this error.

could it be that it is looking up a private URL and not being able to get any reputation for it ?

Hope someone can help,

Regards,

[yogdhanu]

Hi What exactly is the error ? and whats your software version on firesight ? Normally cloud lookup error would come up if the system is not able to communicate to external servers for lookup. Please go through the steps mentioned in this doc. http://www.cisco.com/c/en/us/support/docs/security/firesight-management-center/118852-technote-firesight-00.html Thanks Yogesh

[ibrahim_sms]

Hello Yogesh,

the error says exactly "URL Cloud lookup failure", however I already ran the tests you shared in the link and they were all successful.

I'm running version 6.0 on both the FSMC and the sensor.

[Aastha Bhardwaj]

Hi,

If the tests have already been run and you are able to reach the cloud  on port 80 and 443 and there is no firewall that is blocking communication or proxy involved , I will advise you to open up a TAC case so that further tests can be performed.

Regards,

Aastha Bhardwaj

Rate if that helps!!!

[ibrahim_sms]

The TAC has advised to do an upgrade for 6.0.1 since he witnessed we are generally hitting some bugs.

Unfortunately he did not confirm whether the bugs are related or not.

I will update the this thread once I get any news.

[Dennis Perto]

Have you enabled "Query Cloud for Unknown URLs"?

I have noticed that this often is the reason why the Management Center cannot keep up with the cloud lookups. :)