cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Highlighted

Webex Subscribed list not reflecting on all nodes

Jump to solution

Hi,

We currently are using 2 nodes depending on user location - one node can access webex without issues while the other does not. Did a trace and found that the node with issues is not getting the subscribed list (as compared to the working node - wherein the cycle stops upon reaching the URL, bypassing SSL scan). Tried to do a Manual Engine Update but no go. Any thoughts? Thank you.

1 Solution

Accepted Solutions
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 4

Re: Webex Subscribed list not reflecting on all nodes

Jump to solution

Hi,

Hope you are doing well.

You have a rule using criteria URL.Destination.IP is in range list webex subscribed list then action as Stop Cycle.


To evaluate the rule with criteria URL.Destination.IP , MWG sends the DNS query to configured DNS serve and from the DNS response checks the IP Address and use it. Here DNS servers configured on non working MWG were not returning proper DNS response and thus MWG was setting 255.255.255.255 sand thus the bypass rule was not matching. Internet traffic was working fine as you had NHP configured, in that case NHP is the one who does DNS lookup.

 

From the working MWG , your bypass webex rule was getting triggered because DNS servers configured on that MWG were giving successful DNS response and thus criteria URL.Destination.IP is in range list webex subscribed list was successfully getting evaluated.


In non working MWG we changed DNS servers to the one configured in working MWG and then everything was working as expected.

 

Regards

Alok Sarda

View solution in original post

3 Replies
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Webex Subscribed list not reflecting on all nodes

Jump to solution

Hello,

this could have several reasons such as:

1) other node needs an update proxy configured under "Configuration" > "Central management" > "Automatic engine updates"
("Configuration" tab is not synchronizes between the nodes since this information is appliance specific),

2) network related issues, this node cannot reach the update server because it is blocked somewhere,

3) this node is configured to load the updates/lists from other node instead from internet but they cannot see each other (this config can be checked in same location as mentioned in step 1)
(you can check under "Configuration" > "Appliances" if they are idle and in sync (need to have identical timestamp below. Further you can check mwg-coordinator.errors.log under "Troubleshooting" > "Log files" > "Mwg-errors" if there are any issues shown)

Please check these points. If there are still issues, I would recommend to open a SR and attach a feedback file that support can check config and logs (you can also open a case and tell me SR number via PM).
Such information should just not be uploaded to community because of sensitive information.

Regards,
Marcel Kutrieba
Technical Support Engineer
Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 3 of 4

Re: Webex Subscribed list not reflecting on all nodes

Jump to solution

Hi,

Hope you are doing well.

You have a rule using criteria URL.Destination.IP is in range list webex subscribed list then action as Stop Cycle.


To evaluate the rule with criteria URL.Destination.IP , MWG sends the DNS query to configured DNS serve and from the DNS response checks the IP Address and use it. Here DNS servers configured on non working MWG were not returning proper DNS response and thus MWG was setting 255.255.255.255 sand thus the bypass rule was not matching. Internet traffic was working fine as you had NHP configured, in that case NHP is the one who does DNS lookup.

 

From the working MWG , your bypass webex rule was getting triggered because DNS servers configured on that MWG were giving successful DNS response and thus criteria URL.Destination.IP is in range list webex subscribed list was successfully getting evaluated.


In non working MWG we changed DNS servers to the one configured in working MWG and then everything was working as expected.

 

Regards

Alok Sarda

View solution in original post

Highlighted
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 4

Re: Webex Subscribed list not reflecting on all nodes

Jump to solution

Hi,

Hope you are doing well.

You have a rule using criteria URL.Destination.IP is in range list webex subscribed list then action as Stop Cycle.


To evaluate the rule with criteria URL.Destination.IP , MWG sends the DNS query to configured DNS serve and from the DNS response checks the IP Address and use it. Here DNS servers configured on non working MWG were not returning proper DNS response and thus MWG was setting 255.255.255.255 sand thus the bypass rule was not matching. Internet traffic was working fine as you had NHP configured, in that case NHP is the one who does DNS lookup.

 

From the working MWG , your bypass webex rule was getting triggered because DNS servers configured on that MWG were giving successful DNS response and thus criteria URL.Destination.IP is in range list webex subscribed list was successfully getting evaluated.


In non working MWG we changed DNS servers to the one configured in working MWG and then everything was working as expected.

 


Was my reply helpful?
If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

 

Regards

Alok Sarda

 
 
You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community