Unable to update Antivirus pattern from Cisco CSC SSM

[limlayhin]

I have a Cisco ASA 5520, with Cisco ASA-SSM-CSC-10-K9. ASA version 8.4.3.

Since two days ago, automatic anti-virus pattern update for Cisco CSC SSM failed, error message as below:

AntiVirusPattern : Pattern Update: The download file was unsuccessful for ActiveUpdate was unable to verify security information. The local trusted info database is corrupted. Please contact Trend Micro technical support.. The error code is 62.

The license is valid and the subscription is expired on Sep 2014.

Any body encountered similar problem before?

Any body has Trend Micro Cisco CSC SSM helpdesk contact?

I can't find any Trend Micro info for Cisco CSC SSM.

[Scott Larsen]

Final follow on to this...

CSC seems to be working OK, except even with Patch 1144, I occasionally get:

"Unable to copy file . You must manually copy file /opt/trend/isvw/temp/AU/piranhacache/* to path /opt/trend/isvw/lib/mail/cache."

This only seems to happen when loading the "Anti-spam" pattern.

As this seems to be covered in CSCul25580 I'm not too worried...

[RoadrunnerFB]

I have the same issue. Reports good and says it is up to date though.

[Chadi Matar]

Hello Scott,

I am getting the same notifications and yes it is happening when loading 'Anti-spam' patterns.

Virus pattern 10.623.00 was successfully downloaded and installed.

Anti-spam pattern 20528 was successfully downloaded and installed.

Unable to copy file . You must manually copy file /opt/trend/isvw/temp/AU/piranhacache/* to path /opt/trend/isvw/lib/mail/cache.

[cityofhayden]

Scott, Troy, Chadi...

Same issue here as well with the Anti-spam update message - so at least it is the same for us all...

Seems to be working though.  I'll post back if anything changes, but it is probably as fixed as it is going to get.

[Scott4122]

I have the same problem.  Opened a TAC for the error 62, and received the hotfix 1140.  that hotfix ran fine for about a day, and then I saw the error 16 and 24 as previously stated.  I opened a new TAC today, and haven't gotten much support.  I found the article discussing patch 1144.  I downloaded it and installed it.  My CSC module is "status: unresponsive", as is the ASDM software I usually use with the ASA.  I can telnet into it, but I am a Cisco novice.  My primary ISP was giving me problems tonight, not going down long enough to cause the ASA to rollover to the secondary ISP, and I could not get in to the GUI to force it over.  All total for about an hour I had to deal with 35% packet loss, and some very upset store personnel.  If anyone knows how I can recover my ASA, please let me know.

[Scott Larsen]

Scott, to reimage/recover your CSC, follow the steps here:

http://www.cisco.com/c/en/us/td/docs/security/csc/csc62/administration/guide/csc62adm/cscappa.html

*NOTE* you will need

• access to an internal TFTP server
• copy of the CSC image ".bin" file
• your base license code
• your plus license code (if installed)
• network parameters for your CSC card
• *BONUS* a saved config for the CSC

[Valentin Abramov]

Scott, here is another description how to reimage SSC SSM, with screenshots etc:

https://supportforums.cisco.com/docs/DOC-1323

[mjlaforge]

Has there been a definitive fix for this?  The 1144 update bricked one of my SSMs.  I opened a TAC case and it ended up it needs to be replaced as it was not able to be re-imaged.  The other SSM is showing the "

Unable to copy file . You must manually copy file /opt/trend/isvw/temp/AU/piranhacache/* to path /opt/trend/isvw/lib/mail/cache." message.

[Stephen Bush]

Mine stopped functioning (failed to start GUI and Filtering services) on the first patch after a week, right when 1144 came out, so before I had a chance to apply it. Had to reimage to the 6.6 base and then the 1144 and so far it's been good.

[schokopro]

I also did update to 1140 then reimage to 6.6.1125.0, applied 1145 on blank 6.6.1125.0

now i have today this error:

AntiVirusEngine : Virus scan engine 9.75.1005 was successfully downloaded and installed.

Unable to backup file /opt/trend/isvw/lib/libvsapi.so. You need to manually copy file /opt/trend/isvw/temp/AU/libvsapi.so to path /opt/trend/isvw/lib.

any ideas ?

thanks Ralf

[Magnus Mortensen]

Raif,

     Does that error happen more than once?

[schokopro]

it tries to update virus engine from

Virus Scan Engine

9.12.1004

to 9.75.1005

the error appears once on each scheduled update

[cristianene]

Hi,

Is there any update here? I'm receving the same errors as Ralf.

Also on the Web Interface you can see it (attached a screenshot).

Best Regards,

Cristian

[sr.mkuchar01]

Hello all,

Just want to share my experiance with our CSS SSMs.

I did re-image one of our three units from 6.3.1172.0  to 6.6.1125.0. following guide of this document (https://supportforums.cisco.com/docs/DOC-1323) and on top installed HotFix 1144. So far after two days I am not receiveing any error messages neither the common one "Unable to copy file. ....". Updates are being received OK.

However on other two units which were already on version 6.6.1125.0 HotFix 1140, I installed HotFix 1144 on top of 1140 following readme file and still receiving "Unable to copy file. ..." error message.

Hopefully this can help.

Thanks

[mjlaforge]

Hello -

   I replaced my "bricked" SSM, updated to 1125, restored the config, and then finally updated to hotfix 1145.  I also updated my other SSM to 1145.  Everything seemed to be happy.  Now on the one that was replaced, I'm getting the following error: CSC SSM update status for host csc-ssm2 (10.XXX.XXX.XXX): FAILED 

AntiVirusEngine : Virus scan engine 9.75.1005 was successfully downloaded and installed.

Unable to backup file /opt/trend/isvw/lib/libvsapi.so. You need to manually copy file /opt/trend/isvw/temp/AU/libvsapi.so to path /opt/trend/isvw/lib.

As a side note that may be of importance, several years ago we upgraded the memory to 2 GB.

Thanks