The updater has been unable to communicate with the update server for at least 1h

abillings2 · ‎08-19-2015

Our IronPort systems have begun generating system alerts reading "The updater has been unable to communicate with the update server for at least 1h" roughly every hour.

I have tried the "antispamupdate ironport force" and "antivirusupdate force" commands, but these have had no effect on the problem.

Robert Sherwin · ‎08-19-2015

Hardware appliance or virtual appliance?

Are you able to telnet to the needed dynamic host? update-manifests.ironport.com 443 for hardware, update-manifests.sco.cisco.com 443 for virtual.

> telnet update-manifests.ironport.com 443

or

> telnet update-manifests.sco.cisco.com 443

Any DNS issues, network issues on your side? Are you able to dnsflush to clear out cached DNS entries?

What is updater_logs showing post updatenow force being issued on the CLI? Do the following:

> updatenow force

> tail updater_logs

Watch the logs for a minute or so, see if connection made out, success or fail?

-Robert

Cheers,
Robert Sherwin

Mathew Huynh · ‎08-19-2015

Hello,

I would also suggest trying connection to:

telnet updates.ironport.com 80

telnet downloads.ironport.com 80

Regards,

Matthew