Why does the antivirus file update fail on the ProxyAV appliance after upgrading to AVOS 3.3.1.1 or later versions?


<< Back to Knowledge Search

Solution

Overview

There are several informational articles on this issue in the KB, such as FAQ1769 or KB4780. However, if the antivirus file update fails during v3.3.1.1. or later from AVOS V3.2, please refer to page 7 on the  AVOS 3.3.1.1 release notes.

Symptom

  • The client is unable to update the antivirus pattern files and/or unable to perform a full update manually.

The AlertLogFiles on the ProxyAV displays the folowing message:

ATEXT==========================================
Antivirus Update failed:
Could not get antivirus engine update location.
2011-01-01 00:00:00+09:00JST
ProxyAV (3.3.1.2(57826)) - http://www.BlueCoat.com/
    |
=========================================;CHARSET=;SUBJECT=Antivirus Update status;TARGET=%TARGET;

  • The InternalInfo.log displays the following  failure messages:

2011-01-01 00:00:00+09:00JST AV Updater: start checking AV update...
2011-01-01 00:00:00+09:00JST AV Updater: can't found location in file **************
2011-01-01 00:00:00+09:00JST AV Updater: "get location" state, failed to parse location file.

Conditions

  • The ProxyAV configures an antivirus file update through a ProxySG appliance running SGOS v5.4.4, v5.5.3 or earlier software version.
  • The Protocol Detection feature is enabled on the ProxySG appliance.

Cause of the issue

  •  In AVOS 3.3.1.1 or higher,  the security vulnerability  CVE-2009-3555, was fixed. The ProxyAV can not communicate with the download server through the ProxySG appliance because of the antivirus file update.  See SA44 for more details.

Workaround

        a. Upgrade to the latest general availability (GA) versions of SGOS 5.4.x and 5.5.x.

                  Note: If using BCAAA, upgrade that version as well to ensure compatibility.

b. On the ProxySG appliance, disable SSL protocol detection. Enter the following Content Policy Language (CPL):
          <Proxy>
         url.host=av-download.bluecoat.com http.method=CONNECT detect_protocol.ssl(no)
         [eof]

Cause
Resolution
Workaround
Additional Information
Bug Number
InQuira Doc IdFAQ1774
Attachment

Article Feedback

Hide Properties
First Published      10/01/2014
Last Modified      10/01/2014
Last Published      10/01/2014
Article Audience
Software      ProxyAV 3
Article Number      000016277
Summary     
Was this helpful?
Comments:
 
Previous MonthNext Month
SunMonTueWedThuFriSat