Cisco has acknowledged that an outage has occurred for the update-manifests server with certificate validation error alerts being sent by the appliances.
Our IT team has confirmed the outage is now resolved. We will update this post as soon as more information is provided.
Please do not make changes to your updateconfig or dynamichost configurations. This is not an issue with your appliance communicating out. This is an internal issue on the Cisco tools side.
Please verify that your appliance can reach out to the updater correctly:
myesa.local> telnet update-manifests.sco.cisco.com 443 (For Virtual ESA)
Trying 208.90.58.6...
Connected to update-manifests.sco.cisco.com.
Escape character is '^]'.
^]
telnet> quit
Connection closed.
myesa.local> telnet update-manifests.ironport.com 443 (For Physical ESA)
Trying 208.90.58.6...
Connected to update-manifests.sco.cisco.com.
Escape character is '^]'.
^]
telnet> quit
Connection closed.
The issue has now been resolved. In order to verify, please do the following from the CLI of your appliance:
> antivirusupdate force
> antispamupdate ironport force
> repengupdate force
After - verify through the updater_logs to see the communication thread and assure operation:
> tail updater_logs
