2 Replies Latest reply on May 24, 2013 10:12 AM by gfergus1

    No botnet detectors available for download after update from NSP 7.5.3.11 to 7.5.5.6

    lubomir.cerny

      Hi folks,

      I have just upgraded NSP to 7.5.5.6 version and now I can not download any botnet detectors. We use MWG7 proxy. There is now change on proxy after NSP upgrade. Also we have proxy exceptions for NSP management server to bypass all rules (Stop cycle).

       

      In MWG log, I can see, that SSL tunel is ok.

       

      [24/May/2013:12:33:29 +0200] "" 10.241.10.30 200 "CONNECT menshen.intruvert.com:443 HTTP/1.1" "" "-" "" 97898 "Jakarta Commons-HttpClient/3.1" "" "0"

       

      But NSP manager  do not display any available botnet detectors for download and responds with "Connection timeout: connect" error.

       

      Before upgrade, botnet detectors were OK and deployed to IPS sensors. See error screen below.

       

      Any idea, please ?

       

       

      For firewall logs, I can see some direct https connection from NSP manager to external IP 216.203.40.94.

       

      Message was edited by: lubomir.cerny - added detail from FW log - connection to 216.203.40.94   on 5/24/13 1:07:50 PM CEST