[7.912][DUPLICATE][CLOSED] Up2Date not working anymore (because IPS)

Just discovered that for Upd2date is not working anymore.
The log file is filled with the following information

2010:05:22-00:01:48 asg8 audld[14323]: 
2010:05:22-00:01:48 asg8 audld[14323]:  1. main::alf:841() audld.pl
2010:05:22-00:01:48 asg8 audld[14323]:  2. main::authenticate:578() audld.pl
2010:05:22-00:01:48 asg8 audld[14323]:  3. main::run:378() audld.pl
2010:05:22-00:01:48 asg8 audld[14323]:  4. main::top-level:27() audld.pl
2010:05:22-00:16:02 asg8 audld[15174]: Starting Up2Date Package Downloader
2010:05:22-00:16:02 asg8 audld[15174]: patch up2date possible
2010:05:22-00:16:26 asg8 audld[15174]: Could not connect to Authentication Server 93.189.156.234:443 (code=500).
2010:05:22-00:16:47 asg8 audld[15174]: Could not connect to Authentication Server 93.189.156.234:443 (code=500).
2010:05:22-00:16:47 asg8 audld[15174]: >=========================================================================
2010:05:22-00:16:47 asg8 audld[15174]: All 2 Authentication Servers failed

After i disabled IPS, up2date is fetching updates again.

2010:05:23-14:11:02 asg8 audld[26453]: Starting Up2Date Package Downloader
2010:05:23-14:11:03 asg8 audld[26453]: patch up2date possible
2010:05:23-14:11:07 asg8 audld[26453]: found previous authentication failure, sending INFO-310
2010:05:23-14:11:07 asg8 audld[26453]: Up2Date prefetch is working again
2010:05:23-14:11:07 asg8 audld[26453]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful" 

So IPS is causing the Up2date problems discovered.
Parents Reply Children
  • It is runing in aler mode, but i am more thinking into the direction that IPS is loaded during boot process in an incorrect time /position, causing the ips failed to load / initialize.What i have found out at least for 2 issues i have discovered is when i shutdown ips, and start it again, both issues are gone, but reappear when you perform a restart of the ASG.
  • I actually had no logs at all the day I discovered the issue... I'm guessing that the IPS doesn't initialize at all.  Even the stuff you normally see, like startup messages, doesn't show up.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • Hmm... it's working now... the system has since updated to pattern 12473.  Interesting tidbit... I seem to recall log entries being created when IPS is disabled (in the IPS log)... not seeing that, it just dies silently... I do now see entries when it starts though.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.