Adding Customer Maintained list or McAfee Maintained list fails with error

[CF]

We are running Mc Afee WebGateway 7.6.2.13.0

I cannot add any remotely managed list, for example the Ransomware IP Blocklist of abuse.ch.

A. via McAfee maintained list

1. Goto Policy/Lists and hit the green Plus-Button to add a list

2. Give a name and choose type IPRange

3. Check "List Content is managed remotely

4. Select radio button "McAfee Maintained List:" and click button "Choose"

5. Scroll down and select "Ransomware IP Blocklist from Abuse.ch" and hit button "OK"

6. Hit button "OK" in "Add List"-dialog

=> Error dialog with the following message appears:

Coordinator error An error occured while previewing list with id: com.scur.type.iprange.271 ErrorMessage: Unable to download the preview file

B. Trying to subscribe the same list with either type IPRange or String/Other by giving the URL "https://urlhaus.abuse.ch/downloads/text_online/" results in a similar error.

[mkutrieba · Accepted solution]

Hello,

I did a quick internal research and could not find any similar error. Nevertheless, I am not 100% sure but maybe this is related to outdated/EOL version 7.6.2.X (EOL since end of 2017) or maybe to expired license.
Do mwg-core. and mwg-coordinator.errors.log show more details!?

I would suggest to upgrade to a supported version and then try again (you have to do this anyway in order to receive further official support in future).
Current main is 7.8.2.15 but this should switch to 8.2.2 soon. Would suggest to go to 8.2.2 directly but please take care since there were many changes between your old and our new version. Please read product guide and release notes.
Prior to this, always create a backup and to be on safe side get UUID of your system in case it is a virtual machine (via CLI use this command #mwg-info uuid).

More information about upgrading here:
https://community.mcafee.com/t5/Documents/Web-Gateway-Upgrade-Best-Practices-and-Understanding-Relea...

[CF]

Thx for your quick answer.

An upgrade was planned anyway, so now the priority has risen for us 😄

After gaining access to the Content & Cloud Security Portal I noticed that there are Release Notes for nearly every minor update.

Will I really need to read all of them? Does the product guide contain a summary of the most important changes of a major release? Any suggestions?

[mkutrieba]

Hello,

so the biggest and major changes like new features come every year with the X.X.0 or X.X.2 version, e.g. 7.7.0 or 7.7.2, 7.8.0 or 7.8.2, 8.2.0 or 8.2.2.

Web Gateway 7.7.x Known Issues + release notes:
https://kc.mcafee.com/corporate/index?page=content&id=KB87762

Web Gateway 7.8.x Known Issues + release notes:
https://kc.mcafee.com/corporate/index?page=content&id=KB89719

McAfee Web Gateway 8.2.x Release Notes:
https://docs.mcafee.com/bundle/web-gateway-8.2.x-release-notes/page/GUID-08C18923-A382-4BB9-BFED-F09...

For example, with 8.2.X came the support of TLS1.3 and a mfend kernel module replacement. If you have HA proxy or transparent router configured, then you will need to adjust the configuration after upgrading.
Described here:
https://kc.mcafee.com/corporate/index?page=content&id=KB91848
and here:
https://kc.mcafee.com/corporate/index?page=content&id=KB91849

I hope you will find this information helpful!

[CF]

After the suggested upgrade (now on 8.2.3), I could create the lists without any problem or error.

Thank you very much for your helpful and detailed answers.

[aloksard]

Hi,

Hope you are doing well.

Version 7.6.2.13 is the issue here. This is an EOL version for which we dont provide updates including this.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Regards

Alok Sarda

[AaronT]

Have you tried to save the configuration change then update the list? I've seen in some cases in in 7.8.x where it won't preview, but we can save, then download the updates.

[CF]

Thanks for this idea, but I cannot even create the list without getting the error.