IronPort C160 Dynamic manifest fetch failure

[InsideEdge]

Hello, hope to get some help...I have an Ironport C160 that is failing to update A/V (sophos) and AntiSPAM.   The FileReputation service is reachable and AMP updates OK.  When I force an update, it seems to connect to the update server but then:

Network Participation: Attempting to connect to host: update-manifests.sco.cisco.com port: 443
Network Participation: Successfully connected to host: update-manifests.sco.cisco.com port: 443
Network Participation: Closed connection to host: update-manifests.sco.cisco.com port: 443
Info: Dynamic manifest fetch failure: Received invalid update manifest response

Additionally, I am able to establish a telnet connection to the updater host on port 443.

Any ideas on what to do/try next?

[Bechara.abouraha]

What async os are you running? 

[InsideEdge]

Async 8.5.6

And yes, I know it's EOS/EOL. Just trying to keep the wheels on the bus until we are able to replace it.

[Ken Stieers]

You don't mention what version you're running, but the C160 is EOL/EO Support as of July 31 2017



https://www.cisco.com/c/en/us/support/security/email-security-appliance-c160/model.html



8.5.7-043 was the last available build, but you may not be able to get it since your box is EOS.

8.5 was EOS on Sep 30 2017... so even if you get updated to that version, the AV updates are gone since they've been deprecated as well.





My guess is that box isn't under paid support (otherwise you'd have heard this all by now), so you're going to have to buy one, and migrate the configuration by hand.

[InsideEdge]

Yes, the box does not have paid support. However, the AV/AntiSpam/AMP services are all paid for with over 200 days left. They were working fine, did a reboot (moved the unit) and now I am where I am with it. AMP/File reputation connects ok. 

[charella]

Hello InsideEdge,

The safest path forward, would be to setup a virtual machine and load the virtual ESA.

You can open a Service Request with Licensing to have the keys shared to the virtual.

Link to download virtual ESA/SMA
Install the version closest to your current version, but lower. Possibly 8.5.6 then upgrading it to your matching release. That will enable you to copy the configuration.
https://software.cisco.com/download/release.html?mdfid=284900944&flowid=41782&softwareid=282975113&release=11.1.0&relind=AVAILABLE&rellifecycle=LD&reltype=latest

Wthin this link, towards the top of the page, are the Virtual Appliance Guides.
https://www.cisco.com/c/en/us/support/security/email-security-appliance/products-installation-guides-list.html