Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 57 replies
  • Answers 2 answers
  • Subscribers 39 subscribers
  • Views 205751 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Avira up2date error: Is there any solution?

dempie

Hi,

since yesterday my XG-Firewall cannot download the pattern files for the AVIRA virus scanner any more. This is what I read from 'Log Viewer' under 'View Log for Admin':

2015-12-29 11:17:30 Up2Date FAILED - Failed to download file avira_1.00_1.0.12965_full.tar.gz.gpg 18030
2015-12-29 11:16:31 Up2Date FAILED - Failed to download file savi_1.00_1.0.8492_full.tar.gz.gpg 18030

This process repeats every 30 seconds and is wasting all of my Internet bandwidth, as the download starts, but cannot be finished successfully.

I disbled 'Auto Update' from System>Administration>Updates'. Nevertheless, the XG Firewall doesn't stop downloading these files.

Is there any solution?

Thanks for your help.

Best Regards



This thread was automatically locked due to age.
Parents
  • 0
    I'm not sure if anyone else found this but I did some HTTPS interception upstream of the XG (while troubleshooting this issue) which results in the certificates being re-signed by an untrusted CA. The XG still tried to download the files and ignored the invalid/untrusted CA; this doesn't seem ideal; anyone else have an opinion on this?

    Also, does anyone happen to know how the XG gets the content for /content/u2d/pattern ?
  • 0 in reply to NathanPhelan
    If the pattern files are being signed by a cert which is linked back to a trusted root cert, and they're using certificate pinning when checking, it shouldn't matter if the patterns aren't downloaded over a secure connection or not as the signing check should detect corruption or tampering. This would be best practice.

    Still they need to fix the endless download if the patterns fail to match the check/hash.
Reply
  • 0 in reply to NathanPhelan
    If the pattern files are being signed by a cert which is linked back to a trusted root cert, and they're using certificate pinning when checking, it shouldn't matter if the patterns aren't downloaded over a secure connection or not as the signing check should detect corruption or tampering. This would be best practice.

    Still they need to fix the endless download if the patterns fail to match the check/hash.
Children