cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

Community Helping Community

[RESOLVED] August 9, 2016 - ESA Graymail engine/rules issues

742
Views
0
Helpful
0
Comments
Cisco Employee

This announcement was originally posted on Aug 9, 2016 7:02 AM and has been moved into Blogs for historical keeping.

<Original Announcement and Updates>

Wednesday 8/10/2016

>>> UPDATED 4:18PM US EST

RCA available:

https://supportforums.cisco.com/document/13094681/aug-9-2016-graymail-performance-issue-rca

Thank you,

Cisco Content Security Services

Tuesday 8/9/2016

>>> UPDATED: 12:51PM US EST

Attention ESA Administrators -

At this time, we have identified and corrected the issues with the ESA Graymail engine and associated rules that led to earlier work queue build ups on the appliance.

You may re-enable Graymail at this time, and run a updatenow force after in order to assure the new package is pulled from the update server:

10.0.0-125.local> graymailconfig

Graymail Detection: Disabled

Choose the operation you want to perform:
- SETUP - Configure Graymail.
[]> setup

Would you like to use Graymail Detection? [Y]> y

Increasing the following size settings may result in decreased performance. Please consult documentation for size recommendations based on your environment.

Maximum Message Size to Scan (Add a trailing K for kilobytes, M for megabytes, or no letters for bytes.):
[1M]>

Timeout for Scanning Single Message(in seconds):
[60]>

Graymail Safe Unsubscribe: Disabled
Would you like to use Graymail Safe Unsubscribe? [Y]>

Graymail Detection and Safe Unsubscribe is now enabled. Please note: The global settings are recommended only for your DEFAULT mail policy. To configure policy settings, use the incoming or outgoing
policy page on web interface or the 'policyconfig' command in CLI.


Choose the operation you want to perform:
- SETUP - Configure Graymail.
[]>

10.0.0-125.local> commit

Please enter some comments describing your changes:
[]> Graymail re-enable

Do you want to save the current configuration for rollback? [Y]> y

Changes committed: Tue Aug 09 12:49:24 2016 EDT

After, please complete the following:

10.0.0-125.local> updatenow force

Success - Force update for all components requested

You will then want to allow five minutes for updates to complete, or manually watch the updater logs with tail updater_logs, paying close attention to when the graymail service makes the call for update and load of the package:

Tue Aug 9 12:46:46 2016 Info: graymail waiting for new updates
Tue Aug 9 12:47:17 2016 Info: Server manifest specified an update for graymail
Tue Aug 9 12:47:17 2016 Info: graymail was signalled to start a new update
Tue Aug 9 12:47:17 2016 Info: graymail processing files from the server manifest
Tue Aug 9 12:47:17 2016 Info: graymail started downloading files
Tue Aug 9 12:47:17 2016 Info: graymail waiting on download lock
Tue Aug 9 12:48:16 2016 Info: graymail acquired download lock
Tue Aug 9 12:48:16 2016 Info: graymail beginning download of remote file "http://updates-static.ironport.com/graymail/1.0/graymail_tools/default/1003"
Tue Aug 9 12:48:16 2016 Info: graymail released download lock
Tue Aug 9 12:48:16 2016 Info: graymail successfully downloaded file "graymail/1.0/graymail_tools/default/1003"
Tue Aug 9 12:48:16 2016 Info: graymail waiting on download lock
Tue Aug 9 12:48:16 2016 Info: graymail acquired download lock
Tue Aug 9 12:48:16 2016 Info: graymail beginning download of remote file "http://updates-static.ironport.com/graymail/1.0/vaderetro_lib/default/1470761184"
Tue Aug 9 12:48:20 2016 Info: graymail released download lock
Tue Aug 9 12:48:20 2016 Info: graymail successfully downloaded file "graymail/1.0/vaderetro_lib/default/1470761184"
Tue Aug 9 12:48:20 2016 Info: graymail started applying files
Tue Aug 9 12:48:22 2016 Info: graymail applying file "graymail/1.0/graymail_tools/default/1003"
Tue Aug 9 12:48:25 2016 Info: graymail applying file "graymail/1.0/vaderetro_lib/default/1470761184"
Tue Aug 9 12:48:26 2016 Info: graymail apply update and restart graymail
Tue Aug 9 12:48:55 2016 Info: graymail verifying applied files
Tue Aug 9 12:48:55 2016 Info: graymail updating the client manifest
Tue Aug 9 12:48:55 2016 Info: graymail update completed
Tue Aug 9 12:48:55 2016 Info: graymail waiting for new updates

After, assure the update shows similar, or newer, than the following:

10.0.0-125.local> graymailstatus

Component Version Last Updated
Graymail Library 01-391.01#13 09 Aug 2016 16:55 (GMT +00:00)
Graymail Tools 1.0-03 09 Aug 2016 16:52 (GMT +00:00)

We will post an RCA once this is available for general consumption.

Thank you,

Cisco Content Security Services

CreatePlease to create content
Content for Community-Ad
FusionCharts will render here