6 Replies Latest reply on Nov 29, 2015 12:08 AM by NetTas

    Cannot Load Anti-Malware Engine (14000)

    ozone

      Hi All

       

      Today we installed a new web gateway on a VM and updated it to 7.5.2.4.0 (20507).

      (16GB RAM, 4Cores, 200Gig HD)

       

      All went fine but if we want to browse internet over this box we get the following error:

       

      error.JPG

       

      No Alerts are shown:

      error2.JPG

      The mwg-core-error logs says:

       

      [2015-11-25 16:00:39.137 +01:00] [ ERRORS LOG FLOOD - START ] 6 times within the last 729ms [ED1BD5FFC08C45AD][>>> [AV] [AVError] Error in AntivirusFilter: 'No AV engine could be loaded!'. <<<]

      [2015-11-25 16:01:35.041 +01:00] [ ERRORS LOG FLOOD - RELEASED ] 3 times within the last 297ms [ED1BD5FFC08C45AD][>>> [AV] [AVError] Error in AntivirusFilter: 'No AV engine could be loaded!'. <<<]

      [2015-11-25 16:01:35.041 +01:00] [AV] [AVError] Error in AntivirusFilter: 'No AV engine could be loaded!'.

      [2015-11-25 16:01:35.129 +01:00] [AV] [AVError] Error in AntivirusFilter: 'No AV engine could be loaded!'.

      [2015-11-25 16:01:35.226 +01:00] [AV] [AVError] Error in AntivirusFilter: 'No AV engine could be loaded!'.

      [2015-11-25 16:01:35.373 +01:00] [AV] [AVError] Error in AntivirusFilter: 'No AV engine could be loaded!'.

      [2015-11-25 16:01:35.460 +01:00] [AV] [AVError] Error in AntivirusFilter: 'No AV engine could be loaded!'.

      [2015-11-25 16:01:35.556 +01:00] [AV] [AVError] Error in AntivirusFilter: 'No AV engine could be loaded!'.

      [2015-11-25 16:01:35.668 +01:00] [ ERRORS LOG FLOOD - START ] 6 times within the last 627ms [ED1BD5FFC08C45AD][>>> [AV] [AVError] Error in AntivirusFilter: 'No AV engine could be loaded!'. <<<]

       

      DNS, telnet to websites from the box is working fine

      Thanks verry much for your help!!

       

      Cheers

      ozon

        • 1. Re: Cannot Load Anti-Malware Engine (14000)
          michael_schneider

          That means the box doesn't have the engine loaded (obviously )

          This happens right after update when MWG doesn't have engines and patterns downloaded from the update server. It usually selfresolves once the updates have succeeded. Check the update log to see if it has updated correctly.

           

          Michael

          • 2. Re: Cannot Load Anti-Malware Engine (14000)
            ozone

            Dear Michael

             

            Thanks for your reply!

            The Box is running since two days and error message is still the same.

            I did check the updatelog and found license disable messages there. Could this course this problem? At the license Tab is says license is valid and experation is in a few years.

             

            Thanks again!

            ozone

             

            2015-11-27 11:35:38.774 +01:00] Performing update because 'binary startup'

            [2015-11-27 11:35:38.784 +01:00] ========== Started update process with mode:RegularEngine ==========

            [2015-11-27 11:35:38.907 +01:00] Node xxxx-xxxx-xxx-xxxxx (nodename.domain)  has following update information:

            [2015-11-27 11:35:38.908 +01:00] Product-Name:McAfee Gateway Anti-Malware

            [2015-11-27 11:35:38.908 +01:00] Version:0

            [2015-11-27 11:35:38.908 +01:00] Product-Name:Avira

            [2015-11-27 11:35:38.908 +01:00] Version:0

            [2015-11-27 11:35:38.908 +01:00] Product-Name:McAfee Web Gateway SSOS Filter

            [2015-11-27 11:35:38.909 +01:00] Version:0

            [2015-11-27 11:35:38.909 +01:00] Product-Name:Dynamic Content Classifier

            [2015-11-27 11:35:38.909 +01:00] Version:0

            [2015-11-27 11:35:38.909 +01:00] Product-Name:Telemetry

            [2015-11-27 11:35:38.909 +01:00] Version:0

            [2015-11-27 11:35:38.909 +01:00] Product-Name:GTI web database

            [2015-11-27 11:35:38.909 +01:00] Version:0

            [2015-11-27 11:35:38.909 +01:00] Product-Name:McAfee Gateway Application Control

            [2015-11-27 11:35:38.909 +01:00] Version:0

            [2015-11-27 11:35:38.909 +01:00] Product-Name:McAfee Web Gateway DLP Filter

            [2015-11-27 11:35:38.909 +01:00] Version:0

            [2015-11-27 11:35:38.910 +01:00] Product-Name:McAfee Web Gateway Cloud Encryption Filter

            [2015-11-27 11:35:38.910 +01:00] Version:0

            [2015-11-27 11:35:38.910 +01:00] Node xxxx-xxxx-xxx-xxxxx (nodename.domain)  has following direct update information:

            [2015-11-27 11:35:39.138 +01:00] SSL handshake with https://tau.mcafee.com (217.172.176.87) successful!

            [2015-11-27 11:35:39.545 +01:00] Update server update-id: B72BF23F78

            [2015-11-27 11:35:39.546 +01:00] Status: License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain). Code 54(License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain))for product Subscribed List

            [2015-11-27 11:35:39.546 +01:00] Status: License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain). Code 54(License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain))for product Known CAs (16839)

            [2015-11-27 11:35:39.546 +01:00] Status: License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain). Code 54(License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain))for product McAfee Gateway Anti-Malware

            [2015-11-27 11:35:39.546 +01:00] Status: License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain). Code 54(License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain))for product Avira

            [2015-11-27 11:35:39.546 +01:00] Status: License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain). Code 54(License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain))for product McAfee Web Gateway SSOS Filter

            [2015-11-27 11:35:39.546 +01:00] Status: License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain). Code 54(License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain))for product Dynamic Content Classifier

            [2015-11-27 11:35:39.546 +01:00] Status: License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain). Code 54(License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain))for product Telemetry

            [2015-11-27 11:35:39.547 +01:00] Status: License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain). Code 54(License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain))for product GTI web database

            [2015-11-27 11:35:39.547 +01:00] Status: License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain). Code 54(License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain))for product McAfee Gateway Application Control

            [2015-11-27 11:35:39.547 +01:00] Status: License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain). Code 54(License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain))for product McAfee Web Gateway DLP Filter

            [2015-11-27 11:35:39.547 +01:00] Status: License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain). Code 54(License key disabled for node: xxxx-xxxx-xxx-xxxxx (nodename.domain))for product McAfee Web Gateway Cloud Encryption Filter

            [2015-11-27 11:35:39.547 +01:00] All products are up to date

            [2015-11-27 11:35:39.576 +01:00] Performing update because 'binary startup'

            [2015-11-27 11:35:39.576 +01:00] ========== Started update process with mode:CRL ==========

            [2015-11-27 11:35:39.636 +01:00] Node xxxx-xxxx-xxx-xxxxx (nodename.domain)  has following update information:

            [2015-11-27 11:35:39.636 +01:00] Node xxxx-xxxx-xxx-xxxxx (nodename.domain)  has following direct update information:

            [2015-11-27 11:35:39.636 +01:00] No node wants to update its products

            • 3. Re: Cannot Load Anti-Malware Engine (14000)
              ozone

              Hi Michael

               

              I added a Evaluation license from McAfee, and now it seems to work! I will check with our retailer.

               

              THANKS again for this hint!!

              ozone

              • 4. Re: Cannot Load Anti-Malware Engine (14000)
                michael_schneider

                If you like, sent me your mail and company name via PM and I can start looking into you account.

                • 5. Re: Cannot Load Anti-Malware Engine (14000)
                  NetTas

                  I am experiencing the same problem. I have updated a few appliances to 7.5.2.3 and now 7.5.2.4 and have noticed a delay in uploading the 64 bit AV engine, but this time for the 2 appliances nothing is happening. What is the work-around??

                  • 6. Re: Cannot Load Anti-Malware Engine (14000)
                    NetTas

                    Figured out my problem. I have 4 appliances in cluster ( AP1, AP2, AP3, AP4 ). AP2-4 feed from AP1 for Updates ( not from Internet - AP1 is the CMC). I updated AP4 first up, and when it reboot as 7.5.2.4, the appliance went to AP1 for AV Updates. Because AP4 want 64 Bit AV and AP1 had only 32 bit AV - then AP1 said no.

                    Using Configuration >> Central Management >> Allow to Update from Internet on AP4 - then 64 Bit AV update.

                     

                    Solution is for AP1 to be updated first of all. In stating this I noticed that there is a few moments ( minutes ) after AP is enabled that takes AV to update - this will result with Error Message 14000 until updated.