This announcement was originally posted on Aug 9, 2016 7:02 AM and has been moved into Blogs for historical keeping.
<Original Announcement and Updates>
Wednesday 8/10/2016
>>> UPDATED 4:18PM US EST
RCA available:
https://supportforums.cisco.com/document/13094681/aug-9-2016-graymail-performance-issue-rca
Thank you,
Cisco Content Security Services
Tuesday 8/9/2016
>>> UPDATED: 12:51PM US EST
Attention ESA Administrators -
At this time, we have identified and corrected the issues with the ESA Graymail engine and associated rules that led to earlier work queue build ups on the appliance.
You may re-enable Graymail at this time, and run a updatenow force after in order to assure the new package is pulled from the update server:
10.0.0-125.local> graymailconfig
Graymail Detection: Disabled
Choose the operation you want to perform:
- SETUP - Configure Graymail.
[]> setup
Would you like to use Graymail Detection? [Y]> y
Increasing the following size settings may result in decreased performance. Please consult documentation for size recommendations based on your environment.
Maximum Message Size to Scan (Add a trailing K for kilobytes, M for megabytes, or no letters for bytes.):
[1M]>
Timeout for Scanning Single Message(in seconds):
[60]>
Graymail Safe Unsubscribe: Disabled
Would you like to use Graymail Safe Unsubscribe? [Y]>
Graymail Detection and Safe Unsubscribe is now enabled. Please note: The global settings are recommended only for your DEFAULT mail policy. To configure policy settings, use the incoming or outgoing
policy page on web interface or the 'policyconfig' command in CLI.
Choose the operation you want to perform:
- SETUP - Configure Graymail.
[]>
10.0.0-125.local> commit
Please enter some comments describing your changes:
[]> Graymail re-enable
Do you want to save the current configuration for rollback? [Y]> y
Changes committed: Tue Aug 09 12:49:24 2016 EDT
After, please complete the following:
10.0.0-125.local> updatenow force
Success - Force update for all components requested
You will then want to allow five minutes for updates to complete, or manually watch the updater logs with tail updater_logs, paying close attention to when the graymail service makes the call for update and load of the package:
Tue Aug 9 12:46:46 2016 Info: graymail waiting for new updates
Tue Aug 9 12:47:17 2016 Info: Server manifest specified an update for graymail
Tue Aug 9 12:47:17 2016 Info: graymail was signalled to start a new update
Tue Aug 9 12:47:17 2016 Info: graymail processing files from the server manifest
Tue Aug 9 12:47:17 2016 Info: graymail started downloading files
Tue Aug 9 12:47:17 2016 Info: graymail waiting on download lock
Tue Aug 9 12:48:16 2016 Info: graymail acquired download lock
Tue Aug 9 12:48:16 2016 Info: graymail beginning download of remote file "http://updates-static.ironport.com/graymail/1.0/graymail_tools/default/1003"
Tue Aug 9 12:48:16 2016 Info: graymail released download lock
Tue Aug 9 12:48:16 2016 Info: graymail successfully downloaded file "graymail/1.0/graymail_tools/default/1003"
Tue Aug 9 12:48:16 2016 Info: graymail waiting on download lock
Tue Aug 9 12:48:16 2016 Info: graymail acquired download lock
Tue Aug 9 12:48:16 2016 Info: graymail beginning download of remote file "http://updates-static.ironport.com/graymail/1.0/vaderetro_lib/default/1470761184"
Tue Aug 9 12:48:20 2016 Info: graymail released download lock
Tue Aug 9 12:48:20 2016 Info: graymail successfully downloaded file "graymail/1.0/vaderetro_lib/default/1470761184"
Tue Aug 9 12:48:20 2016 Info: graymail started applying files
Tue Aug 9 12:48:22 2016 Info: graymail applying file "graymail/1.0/graymail_tools/default/1003"
Tue Aug 9 12:48:25 2016 Info: graymail applying file "graymail/1.0/vaderetro_lib/default/1470761184"
Tue Aug 9 12:48:26 2016 Info: graymail apply update and restart graymail
Tue Aug 9 12:48:55 2016 Info: graymail verifying applied files
Tue Aug 9 12:48:55 2016 Info: graymail updating the client manifest
Tue Aug 9 12:48:55 2016 Info: graymail update completed
Tue Aug 9 12:48:55 2016 Info: graymail waiting for new updates
After, assure the update shows similar, or newer, than the following:
10.0.0-125.local> graymailstatus
Component Version Last Updated
Graymail Library 01-391.01#13 09 Aug 2016 16:55 (GMT +00:00)
Graymail Tools 1.0-03 09 Aug 2016 16:52 (GMT +00:00)
We will post an RCA once this is available for general consumption.
Thank you,
Cisco Content Security Services
