FAQ

Why does the antivirus file update fail on the ProxyAV appliance after upgrading to AVOS 3.3.1.1 or later versions?

FAQ ID:    FAQ1774
Version:    3.0
Status:    Published
Published date:    12/19/2011
Updated:    08/17/2012
 

Answer

There are several informational articles on this issue in the KB, such as FAQ1769 or KB4780. However, if the antivirus file update fails during v3.3.1.1. or later from AVOS V3.2, please refer to page 7 on the  AVOS 3.3.1.1 release notes.

Symptom

  • The client is unable to update the antivirus pattern files and/or unable to perform a full update manually.

The AlertLogFiles on the ProxyAV displays the folowing message:

ATEXT==========================================
Antivirus Update failed:
Could not get antivirus engine update location.
2011-01-01 00:00:00+09:00JST
ProxyAV (3.3.1.2(57826)) - http://www.BlueCoat.com/
    |
=========================================;CHARSET=;SUBJECT=Antivirus Update status;TARGET=%TARGET;

  • The InternalInfo.log displays the following  failure messages:

2011-01-01 00:00:00+09:00JST AV Updater: start checking AV update...
2011-01-01 00:00:00+09:00JST AV Updater: can't found location in file **************
2011-01-01 00:00:00+09:00JST AV Updater: "get location" state, failed to parse location file.

Conditions

  • The ProxyAV configures an antivirus file update through a ProxySG appliance running SGOS v5.4.4, v5.5.3 or earlier software version.
  • The Protocol Detection feature is enabled on the ProxySG appliance.

Cause of the issue

  •  In AVOS 3.3.1.1 or higher,  the security vulnerability  CVE-2009-3555, was fixed. The ProxyAV can not communicate with the download server through the ProxySG appliance because of the antivirus file update.  See SA44 for more details.

Workaround

        a. Upgrade to the latest general availability (GA) versions of SGOS 5.4.x and 5.5.x.

                  Note: If using BCAAA, upgrade that version as well to ensure compatibility.

b. On the ProxySG appliance, disable SSL protocol detection. Enter the following Content Policy Language (CPL):
          <Proxy>
         url.host=av-download.bluecoat.com http.method=CONNECT detect_protocol.ssl(no)
         [eof]


Rate this Page

Please take a moment to complete this form to help us better serve you.

Did this document help answer your question?
 
 
If you are finished providing feedback, please click the RATE CONTENT button. Otherwise, please add more detail in the following text box and then click RATE CONTENT.
 
 

Your response will be used to improve our document content.

Ask a Question