Cisco Cisco Web Security Appliance S670 Guía Para Resolver Problemas

service engine or rulesets, even if you enter the update force command.

One of these commands might have been entered directly from the CLI on the vESA:

> antispamupdate ironport

>antispamupdate ironport force

>antivirusupdate force

>updatenow force

When you run tail updater_logs, the errors seen are similar to these:

Mon Oct 21 17:48:43 2013 Info: Dynamic manifest fetch failure: Received invalid

update manifest response

This indicates that the dynamic host URL associated to the update configuration is not able to
reach the proper updater manifest correctly. The dynamic host URL is set within the updateconfig
command. The subcommand, dynamichost, is a hidden command within updateconfig, as
highlighted here:

myesa.local> updateconfig

Service (images): Update URL:

------------------------------------------------------------------------------

Feature Key updates http://downloads.ironport.com/asyncos

McAfee Anti-Virus definitions Cisco IronPort Servers

RSA DLP Engine Updates Cisco IronPort Servers

PXE Engine Updates Cisco IronPort Servers

Sophos Anti-Virus definitions Cisco IronPort Servers

IronPort Anti-Spam rules Cisco IronPort Servers

Intelligent Multi-Scan rules Cisco IronPort Servers

Outbreak Filters rules Cisco IronPort Servers

Timezone rules Cisco IronPort Servers

Cisco IronPort AsyncOS upgrades Cisco IronPort Servers

IMS Secondary Service rules Cisco IronPort Servers

Service (list): Update URL:

------------------------------------------------------------------------------

McAfee Anti-Virus definitions Cisco IronPort Servers

RSA DLP Engine Updates Cisco IronPort Servers

PXE Engine Updates Cisco IronPort Servers

Sophos Anti-Virus definitions Cisco IronPort Servers

IronPort Anti-Spam rules Cisco IronPort Servers

Intelligent Multi-Scan rules Cisco IronPort Servers

Outbreak Filters rules Cisco IronPort Servers

Timezone rules Cisco IronPort Servers

Service (list): Update URL:

------------------------------------------------------------------------------

Cisco IronPort AsyncOS upgrades Cisco IronPort Servers

Update interval: 5m

Proxy server: not enabled

HTTPS Proxy server: not enabled

Choose the operation you want to perform:

- SETUP - Edit update configuration.

[]> dynamichost

Enter new manifest hostname : port

[update-manifests.sco.cisco.com:443]>

There are two different dynamic host URLs that are used for customers based on how they are
associated through Cisco:

update-manifests.sco.cisco.com:443 

●