Upgrading ESA C100V appliance

Hi,
We are trying to uprade our ESA to build 106.
And we still get the following error:
The following errors occurred during upgrade:
Download error: http://updates.ironport.com/asyncos/phoebe-8-5-6-106/hints/default/1
Upgrade exited without success.
Please attempt the upgrade again after clearing the error.
I have cleared the error for several times, but it still exists.
In the log directory i saw the following error:
DownloadError url=http://updates.ironport.com/asyncos/phoebe-8-5-6-106/hints/default/1 reason=>
But there was no reason mentioned.
I checked the DNS and everything seems to be allright.
How can i solve this issue?
Regards,
Ronald Pastoor

Do you have a proxy in place? Is appliance in cluster with hardware appliances?
Also - can you assure that you are pointing to update-manifest.sco.cisco.com:443 for your updateconfig settings?
http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118065-maintainandoperate-esa-00.html
-Robert

Similar Messages

Virtual ESA c100v on VMware cloud deployment

Hello,
I am testing a c100v virtual ESA appliance with the latest image from the Cisco site on a cloud VMWare virtual environment. I have it configured with 2 vCPU's, 6GB RAM, 200GB HD, and 1 nic.
I initially setup the image on my internal testing ESXi server. This worked just fine. I had 3 nics configured in VMware but only 1 configured in the VM.
I shutdown the VM, removed the nics, exported the OVA and imported it into this cloud environment. The cloud environment offers just a single nic to a VM.
I logged onto the console access and changed the interface config for the management interface to have the new IP/Subnet/GW.
Performing a netstat on all interfaces just shows:
Name MTU Network Address Ipkts Ierrs Idrop Ibytes
0pkts 0errs 0byts Coll Drop
I attempted to start a packet capture on all interfaces. It returned the following:
"Failed to start packet capture: Interface Error".
This occurs no matter which interface I select.
If I attempt to run a "version" it throws several errors and ends in:
"ValueError: interface not found"
Any thoughts on what to check next or how to check?
Thanks,
Eric

Well, we finally figured it out. (Thank you to a few people on #cisco on Freenode IRC for pointing me in the right direction)
The cloud VM provider only creates vmnetx3 nics by default. We had to request e1000 nics be assigned to the VM. Once they changed the config and powered up the VM the c100v saw the network correctly and routes traffic correctly now too. I was also able to test this on my test ESXi server. The virtual ESA VM's only accept e1000 nics, not vmnetx3.
kstieers1 - We are able to have the c100v work correctly with just a single nic. As long as I don't attempt to configure the other 2 nics via the CLI or web then I should be just fine. Yes, it is an unsupported config. I'm thinking we'll go down to the c000v image later in testing as that has fewer nics.

WCS Software upgrade on WLSE appliance

Hi
I am having difficulty upgrading the software code of WCS. We have a WLSE appliance that was upgraded to a WCS. I have downloaded the latest WCS software code (7.0.172) unto my PC. However, I do not know how to upgrade the WCS, since the WLSE is a stand alone appliance running on Linux and the WCS is just a GUI interface hosted from the WLSE appliance. Please how do I go about this upgrade. Thanks

Hi,
here is the link which answeres ur question!!
http://www.cisco.com/en/US/docs/wireless/wcs/7.0/configuration/guide/7_0wlse.html
Please let me know if this helps and please dont forget to rate the usefull posts!!
Regards
Surendra

IronPort ESA 170 Upgrade Failed

Hi All,
We have just got two IronPort ESA 170 appliances delivered.
I started off with upgrading the firmware from version 7.5.2-101 to 7.6.3-019. One of the appliances got upgraded fine. However, I am getting an error on the other one. Exactly when the upgrade reaches at 72% it throws the error " The following error occured during upgrade: Upgrade exited without success. Please attempt upgrade again after clearing the error". Attached is the screnshot.
I tried upgrade three times and got the same error all the time. Just wanted to know if anyone else has faced anything similar before raising a TAC. Is it because of disk space issue?
Please assist.
Thanks in advance.
Faiz

If you try to upgrade more than once and you keep getting the same error at the same time, then you could think about bandwidth control in the network or web traffic redirection.
A packet capture could help finding more info about what can be the case or you may want to go through TAC. With remote access to your appliance they can identify if the issue is with your appliance or not. And if it is not, they may be able to assist you identifying the cause.
Last but not least, you can try Local Upgrade. Please refer to the Technical Article below.
=============================================
Comprehensive Guide to Local Upgrade Servers
Knowledge Base Answer ID: 1558
http://tools.cisco.com/squish/212fd
I hope this helps. If that is the case, please mark the question as answered.
Regards,
-Valter

Ironport C170 Email Security Appliance - No Upgrades Available Error

Hi All,
I have a pair of IronPort ESA C170 with Async OS version 7.6.2-014. one of them displayed two versions that are available for upgrade:
7.6.3 & 8.0.1; however , the other appliance displays "Error - no available upgrades".
So we tried to open the link : http://updates.ironport.com/fetch_manifest.html
updated the serial number information for the first one and it displayed the two versions ( 7.6.3 & 8.0.6 ) successfully and it didn't display anything when i put the serial number of the second appliance.
The Problem clearly that we cant upgrade the second appliance.
So Appreciate to share your experience on this.
Thanks,

You will need to open a support case so that we can get your serial number of the appliance, review to make sure it is in the correct upgrade provisioning group, and then also work with you direct to assure that you have the correct network settings to reach the updater servers.
You should be able to open a telnet session from the CLI on the appliance(s) to downloads.ironport.com on port 80, update-manifests.ironport.com on port 443...
8.0.1 is the latest GA release - and will be the last available hop in upgrade paths. So, if the appliance is on 8.0.1, then there will be no further upgrade availability currently for the appliance. If you are needing to get to 8.5, which is FCS, you'll need to request provisioning through a support request.
-Robert

ACS upgrade from 4.0.x to 4.1.x "Appliance upgrade in progress"

Hello friends,
We are in the process of upgrading ACS 4.0 to 4.1 in a SE appliance 1113.
We followed very carefuly the steps, and upgraded de Appliance management ACS 4.1. The second upgrade (Software for appliance 4.1) keeps showing "Appliance upgrade in progress..." (near 2 hours by now). I know that it can stick even finishing, but it seems it has not finished because we can not log in with the GUI Administrator account like we did when upgrading the management software (previous step).
Is this normal? what can be missing?, I attach the console text output below (IP adds obscured).
Note the management upgrade went fine.
Thanks.
Cisco Secure ACS: 4.1.1.23
ACS 4.0.1.49-CSAdmin-CSCsd96293_CSCse26719 Fix: (Patch: 4.0.1.49 Tue 01/09/2007
7:50:00.17)
Appliance Management Software: 4.1.1.23
Appliance Base Image: 4.0.1.2
CSA build 4.0.1.543.2: (Patch: 4_0_1_543)
Appliance upgrade in progress...
Session Timeout: 10
Last Reboot Time: Fri Jun 06 11:46:40 2008
Current Date & Time: 6/6/2008 13:17:40
Time Zone: (GMT-05:00) Bogota, Lima, Quito
NTP Server(s): 131.107.1.10
CPU Load Free Disk Free Physical Memory
0.00% 16.9 GB 765 MB
Appliance IP Configuration
DHCP Enabled. . . . . . . . . . .: No
IP Address. . . . . . . . . . . .: 172.16.x.y
Subnet Mask . . . . . . . . . . .: 255.255.255.0
Default Gateway . . . . . . . . .: 172.6.x2.y2
DNS Servers . . . . . . . . . . .: 172.16.x3.y3
CSAdmin running
CSAuth running
CSDbSync running
CSLog running
CSMon running
CSRadius running
CSTacacs running
CSAgent stopped
Appliance upgrade in progress...

Thanks Jagdeep, but the upgrade has not finished.
The documentation mentions (please read it carefully):
"IF YOU COMPLETE THE UPGRADE and the ACS console displays the message Appliance upgrade in progress, this indicates that the upgrade PROGRESS is hanging.
If this condition occurs, start an ACS console session and enter the command download [hostAddress], where hostAddress can be any IP address. This action releases the ACS console from the upgrade process."
What worries me is that it has not finished.
As I said in my post, we can not log in :( (the GUI gets blocked during the upgrade).
I appreciate the help. Many Thanks.

When is the appliance database upgraded?

Hi
When upgrading a UC appliance, is the database upgraded during the upgrade or the the switch?
We are upgrading all servers for a customer (6x CUCM, UCCX HA, CUC...) from 8.0 to 9.x and moving them from MCS to ESXi on UCS.
The CUC has an ES that nobody can find so i have to upgrade the CUC ES to a 8.5 version just above the ES version. But yesterday i discovered that the CUC has an upgraded inactive partion.
If the database is converted during the installation of the upgrade i have to to the upgrade then switch. But it the database is upgraded during the switch i only have to do the switch.
/Tony

For most products - definitely for CUCM and CUC - it happens during the upgrade so you're going to have to upgrade and switch version again.
Please remember to rate helpful responses and identify helpful or correct answers.

Upgrading a S&S 5.3.0 failover cluster to 5.3.7

Hi!
we need to upgrade our S&S to 5.3.7. Currently we have S&S and DMM 5.3.0 in failover cluster.
In pre-prod, were we have no cluster, just a single DMM and a single S&S, we upgraded the S&S easily.
But when facing the procedure for upgrading the S&S in the Failover cluster, after reading the official Cisco docs, we have few doubts:
1) We know that we'll need to break the cluster, reverting to standalones, before upgrading, but, since we just need to upgrade the S&S to 5.3.7 (DMM remains 5.3.0), is it enough if we break only the S&S cluster and revert to standalones, while keeping the DMM failover cluster with no changes?
2) Once we have upgraded the active/primary, I don't understand point 4 of the upgrading procedure, where it says “Reimage the secondary DMM and Show and Share appliances. Install the same software release that you upgraded the primary appliances to.”?
What does “REIMAGE” mean? does it mean that we'll need to install the secondary unit from zero to 5.3.7 and then, when both are 5.3.7, re-do the failover cluster? Isn't it enough to break the cluster, upgrade each member to 5.3.7, and then re-do the cluster again? or does it mean that the secondary unit will be unusable after breaking the cluster?
Does any of you know any more specific guide (or your own experience) of upgrading a failover cluster?
many thanks from Spain,
DAVID

The Skype extension for Firefox has a long history of being problematic in Firefox. Various older version of that extension have been "blocklisted" by Mozilla from time to time due to causing a high number of Firefox crashes in the last 3 or 4 years. <br />
http://kb.mozillazine.org/Problematic_extensions
You don't need that Skype extension in Firefox to be able to use Skype '''or''' to use Firefox.

Upgrade NCS 1.1.0.58 - Prime Infrastructure 1.3 or 1.2 - license

Hi!
I´m about to upgrade a customers appliance box to PI 1.3. Have anyone done it? and were there any issues with license?
I guessing an upgrade to 1.2 would be almost the same, license wise. If anyone has input fram that it would also be appreciated.
Any other input regarding the upgrade is also welcomed..
Regards
Fredrik

As I stated earlier the upgrade went fine but after about three days the database service stopped and wouldnt start again. It required a reinit of the db and then restore the db from backup to get it up again.
I had a TAC case on this and they gave me info about this in bug # CSCue88178.
CSCue88178 Inline upgrade from NCS 1.1.0.58 to 1.3 fails to update db schema
Symptom:
NCS 1.1.0.58 inline upgrade to 1.3 does not mention any errors during the upgrade process. However the db schema is never actually upgraded, and thus 1.3 does not start.
Conditions:
1. Installed ncs_patch-1.1.0.58-upgrade-12.tar.gz pre-patch.
2. Performed inline upgrade to NCS 1.3.0.20
Workaround:
Do not use inline upgrade; use restore upgrade instead.
This info was not available at the time of my upgrade.

Adanced Malware Protection AMP - Demo license ESA C170

My customer has an ESA C170 appliance in production and he wants to try the AMP funcionality.
How can I get an Adavanced Malware Protection AMP demo license for the Email security Appliance C170.
Thanks in advanced
Diego Prada

You will need to get the following feature key applied from GLO, avail in 1Y, 3Y, and 5Y...
GLO should also be able to provide a 30-day temp/trial key, if requested.
You will need to reach out to GLO and request the demo license/feature key to be added to the serial, if hardware - or to the virtual license number (VLN) if a virtual appliance.
Global Licensing Operations (GLO):
https://tools.cisco.com/SWIFT/LicensingUI/Home
Licensing FAQ
Phone: 1-800-553-2447, opt 3
Request to have a case opened for GLO/Licensing.
Their email directly is: [email protected]
-Robert

Apply patch to acs Appliance

I was wondering if someone can help me to upgrade my ACS Appliance with patch 4.1.1.23.4-SW. It was simple to apply this one in a normal server 2000. The ACS appliance I think is different because that we can access by normal terminal, keyboard and mouse.
Some were I read that is necessary a tomcat server?
Please help
adi

Hi,
ACS v4.1.1.23 patch 5 is available so go for this new patch.
You should have a pc which can access ACS through web interface. Keep the patch file on the PC.
Follow the steps below on the PC:
[1] Extract zipped file
[2] Look for ?autorun.exe? file and double click on it
[3] It will start a tomcat server on your desktop and you?ll see a web page asking for ACS
SE ip address :
Provide in the ACS SE ip address and press ?Install?
[4] It will prompt for ACS admin username and password as shown below :
Provide in the username and password and login.
[5] Then it bring up ACS GUI, then go to
System Configuration > Appliance Upgrade Status > Download,
Then we?ll get a screen where it will ask for ip address of Install Server :
Provide in ip address of system from where we are applying this patch, in our case our
desktop ip address, then click connect.
[6] It will show us following screen :
Click on ?Download Now?
Then it?ll show us this screen :
Press ?Refresh? Till we see following screen :
[7] Now press ?Apply Upgrade?. Then it?ll ask for confirmation :
Press ?Upgrade?, then we?ll get information regarding the patch.
Click ?Yes?.
It?ll take few minutes to apply that patch on appliance.
Then it?ll show us a confirmation message :
Press ?Done?, then system will reboot.
To confirm that patch has been applied successfully, goto
System Configuration > Appliance Upgrade Status
After everything is fine stop the tomcat server by clicking on ?stop distribution server? or
if you want to apply this patch on some more appliance click on ?Install Next?
Hope this helps.
~Rohit

Querry on Location Appliance Server

Hi,
I need a help on the below :
Can we upgrade the Location Appliance to any version which is compatible with both WCS servers (4.2.110) and (5.2.100).If yes then which version would we go for location Appliance.
Please let me know.
Regds,
Lalit

The location appliance software is tied to the version of WCS that is running. The release notes for WCS tell which
version you should be running on the WLA.
For 4.2.110:
http://www.cisco.com/en/US/docs/wireless/wcs/release/notes/WCS4_2MR3.html
recommended code is: 3.1.42.0
For 5.2.110:
http://www.cisco.com/en/US/docs/wireless/wcs/release/notes/WCS_RN5_2.html
recommended code is: 5.2.91.0 (for both MSE and LA )
You should also keep in mind that location is tied to a range of code on the controllers and should be checked against the release notes
for location:
http://www.cisco.com/en/US/products/ps6386/prod_release_notes_list.html

Any experience of upgrading a WLSE to WCS?

Hi All,
Has anyone out there upgraded a WLSE appliance to WCS? It seems a fairly easy process going by the instructions on the site but I wonder if there are any pitfalls to be wary of?
Any advise would be appreciated.
Thanks
Scott

It's works very well !
Normally you will not found any problem.
I do that 3 weeks ago, and works fine.
Be sure to have the 2 CDs with you to do the process. And you should be physically connected to the console port.
The process can't be done remotly.
The migration guide is on:
http://www.cisco.com/en/US/products/ps6305/products_configuration_guide_chapter09186a00806b71db.html
Regards,
Emilio

ACS 1112 upgrade

Hi everyone,
I want to upgrade my ACS appliance 1112 running software version 3.3 to 5.x?
How can i go about this or should i go and purchase new ACS appliance(1120)?
br
sam

a.kiprawih is right, you need to upgrade your ACS 3.2(1) to ACS 4.0, then take a backup of it and restore it in new ACS 1112 ACS 4.0. The easiest way to accomplish it would be take a backup of ACS SE 1111 3.2(1), open a TAC case send your backup to TAC, get it upgraded to 4.0, they'll send you upgraded backup, restore it in ACS SE 1112 4.0 appliance, you are ready to roll. If you dont want to send your backup to TAC, create a test Win2000 server, install ACS 3.2(1), take a backup oif ACS SE 1111 3.2(1), restore it. Upgrade it to ACS 3.3(3) build 11 on Win2000, take a backup. Then again upgrade it to ACS 4.0 on Win2000, take this backup(Final one).
Configure your ACS SE 1112 4.0 basic setup, then restore the ACS 4.0 backup from Win2000, and make sure you have all your IP address and other stuff in place, you are good to roll.
NOTE : While uprading from ACS 3.3(3) build 11 to ACS 4.0 on Win2000 serer, you may hit a bug due to trailing spaces in NAS ip address defined on ACS server. Best way.. Open a TAC case.
Let me know if this helps :)

Security update and demo licence

Is it possible de make security update on virtual ironport with valid demo licence ?
Thanks for your attention
Cisco C100V
Description
Status
Time Remaining
Expiration Date
Outbreak Filters
Active
39 days
27 Aug 2014 01:59 (GMT +02:00)
IronPort Anti-Spam
Active
39 days
27 Aug 2014 01:59 (GMT +02:00)
Sophos Anti-Virus
Active
39 days
27 Aug 2014 01:59 (GMT +02:00)
Incoming Mail Handling
Active
39 days
27 Aug 2014 15:42 (GMT +02:00)
IronPort Email Encryption
Dormant
39 days
27 Aug 2014 01:59 (GMT +02:00)
RSA Email Data Loss Prevention
Active
39 days
27 Aug 2014 01:59 (GMT +02:00)
Bounce Verification
Dormant
39 days
27 Aug 2014 01:59 (GMT +02:00)

(*I edit your serial from your original post --- please do not post serial number for security reasons!) :-)
Did you request the license for demo from the License Administration Portal:
https://tools.cisco.com/SWIFT/LicensingUI/Quickstart
Click "Get Other Licenses" > "Demo and Evaluation" > "Security Products" > "Cisco Virtual Appliance Demo License" > "Cisco Email Security Appliance (ESA) Virtual Appliance 45 Day Demo License"
Fill out the needed information once presented for the target devices and options, and submit.
If this was a recent request within the past week, you will need to re-request, as there was an incorrectly stamped certificate within the license XML provided that does not allow the virtual appliances to reach out and validate against the provisioning correctly. This WILL prevent you from getting updates and activating test feature keys.
I hope this helps!
-Robert
(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

Upgrading ESA C100V appliance

Similar Messages

Maybe you are looking for