cancel
Showing results for 
Search instead for 
Did you mean: 
ghunjan
Level 9
Report Inappropriate Content
Message 1 of 12

Callback detector not updating

Jump to solution

After NSM upgrade from 8.3.7.64 to 9.1.1.75

Callback Detector is not getting updated automatically.

When tried to Download Callback detector manually, it throws error: "Concurrent Expception Bot Dat is already in progress".Download manually.PNG

Restarted the McAfee Network Security Manager Service and it updated. 

But now it is again stuck and Callback Detector is Out of date.

No connection issues between Manager and Sensor

 

Please advise.

 

Thanks,

Gagandeep 

 

 

1 Solution

Accepted Solutions
McAfee Employee daloy
McAfee Employee
Report Inappropriate Content
Message 2 of 12

Re: Callback detector not updating

Jump to solution

The issue as you describe it would be between the NSM and the botnet update URL....

Have you tried restarting NSM and getting a pcap from the NSM itself when the update fails (ideally from when you start it to download)?

 

Regards,

David

11 Replies
McAfee Employee daloy
McAfee Employee
Report Inappropriate Content
Message 2 of 12

Re: Callback detector not updating

Jump to solution

The issue as you describe it would be between the NSM and the botnet update URL....

Have you tried restarting NSM and getting a pcap from the NSM itself when the update fails (ideally from when you start it to download)?

 

Regards,

David

ghunjan
Level 9
Report Inappropriate Content
Message 3 of 12

Re: Callback detector not updating

Jump to solution

Hi David,

 

Thanks for reaching out. 

Please see the Health check below. 

Healthcheck.PNG

The only way I see to reboot NSM, is rebooting individual Sensors. If that is the case, would you recommend me to reboot hitless or full reboot?

Is there any other way to reboot NSM?

 

For pcap, shall I keep this default setting?

Pcap.PNG

 

Thanks,

Gagandeep

Reliable Contributor mjesmer
Reliable Contributor
Report Inappropriate Content
Message 4 of 12

Re: Callback detector not updating

Jump to solution

.Rebooting the sensors is not what he was suggesting. The NSM Application is hosted on a Server, to "reboot" the NSM you either need to kill the services on that server for the NSM, or reboot that host server completely.

My understanding of the issue you are having is that after upgrading the DAT files are not getting updated on the Manager automatically. And upon manual update you are seeing that the process is hung for DAT Update and throwing a duplicate process exception.

What are the automatic update settings for Callback Detectors on your NSM?

It might be worth changing this to manual, saving it. Restarting the NSM Services on the host server, then updating to the latest DAT and restoring the automatic download and update to its original settings prior to restart, and monitor for issues.

But if this community cannot get it resolved for you, I would suggest contacting support and getting an SR opened if you haven't already.

ghunjan
Level 9
Report Inappropriate Content
Message 5 of 12

Re: Callback detector not updating

Jump to solution
Hi mjeser,

No, it did not resolve the issue. Although after reboot Callback Detector updated to the latest version but again now it is outdated.
Shall I check ems.log or some other log files to see the cause?
ghunjan
Level 9
Report Inappropriate Content
Message 6 of 12

Re: Callback detector not updating

Jump to solution

Hi David,

Sorry for the delay getting back. 

No, I did not had a chance but Callback Detectors is getting updated to the latest available version with out Restarting Host or any service for last week.

As far as I know no change is made on the NSM.

This is the current status of Health check. Marking this as Resolved now.

 

CallBack Detector is updated.PNG

Highlighted
Reliable Contributor petermason
Reliable Contributor
Report Inappropriate Content
Message 7 of 12

Re: Callback detector not updating

Jump to solution

Hi Ghunjan,

Are you seeing any errors if you run the Health Check -  Callback Detectors Update Server Connectivity ?

Have you checked the logs for errors at the time the process is failing?

Regards

Peter Mason

ghunjan
Level 9
Report Inappropriate Content
Message 8 of 12

Re: Callback detector not updating

Jump to solution

Hi Peter,

Healthcheck looks ok so far. 

Healthcheck.PNG

I have checked ems.log and I don't see any issue there... 

 

Thanks,

Gagandeep

McAfee Employee lpinheir
McAfee Employee
Report Inappropriate Content
Message 9 of 12

Re: Callback detector not updating

Jump to solution

Have you tried the manual update by downloading the .zip file and importing it manually on the NSM?

Please, check it here: http://download.nai.com/products/botnet/

And here: https://docs.mcafee.com/bundle/network-security-platform-9.1.x-product-guide/page/GUID-6A5B718D-B165...

I suggest you restart the entire NSM server before to that.

Lucas

Re: Callback detector not updating

Jump to solution
Restarting NSM Server or just the NSM manager service lets the CallBack detector to be updated to the latest version which is available but when the Automatic CallBack Detector checks for the latest update again, it fails download and install.

Could you direct me the logs and error I should investigate into?

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community