09-02-2021 06:06 AM
Hello,
We are experiencing a weird issue regarding the amp of an WSA.
Several times a week, we observe "file reputation server is unreachable" messages.
We tried to telnet the corresponding cisco servers and we saw that the connections are successful. Therefore, we know that it's not a network related issue.
When we performed a packet capture for traffic destined to file reputation server for almost an hour, we realized that the no traffic has been captured. We are not certain if this was coincidence or we should run the capture on a certain time or a day.
On amp logs, we observed that the file analysis is occurring without issues.
Solved! Go to Solution.
10-03-2021 02:49 AM
Hello,
It's better to have the capture running for almost a day, to be certain that no traffic is being captured before you conclude that there is no communication.
Also, the errors in my case were temporary not consecutive, so there was no issue.
Hope it helped the next guy/gal who will investigate a similar issue.
Cheers,
MEB
09-02-2021 06:19 AM
Can you check ? with right interface it using ? when you to telnet is this using Management or P1 or P2 (outside interface to go out ?)
09-02-2021 06:21 AM
Hello,
Thanks for your reply.
When I telnet, I am using an explicit interface that we have (neither management nor P1/P2)
10-03-2021 02:49 AM
Hello,
It's better to have the capture running for almost a day, to be certain that no traffic is being captured before you conclude that there is no communication.
Also, the errors in my case were temporary not consecutive, so there was no issue.
Hope it helped the next guy/gal who will investigate a similar issue.
Cheers,
MEB
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide