This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

"Categorization failed" for cffs cloud lookups in 9.111-7

Do others observe cffs categorization failures yesterday/today?

Current software version...: 9.111007
Hardware type..............: Software Appliance

Using cloud cffs for categorization.  Home license.  UTM timezone is UTC-4.

Yesterday there was a period where the web filter was returning "EVP_DecryptFinal failed"- reports are that web browsing wasn't functional during this time:


2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs28.astaro.com: decrypt failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs23.astaro.com: decrypt failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs06.astaro.com: decrypt failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs13.astaro.com: decrypt failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs03.astaro.com: decrypt failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs07.astaro.com: decrypt failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs24.astaro.com: decrypt failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs18.astaro.com: decrypt failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs14.astaro.com: decrypt failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-16:12:45 utm httpproxy[7348]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs12.astaro.com: decrypt failed"
2014:06:19-18:41:11 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-18:41:11 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs01.astaro.com: decrypt failed"
2014:06:19-18:41:11 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-18:41:11 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs02.astaro.com: decrypt failed"
2014:06:19-18:41:11 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-18:41:11 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs03.astaro.com: decrypt failed"
2014:06:19-18:41:11 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-18:41:11 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs04.astaro.com: decrypt failed"
2014:06:19-18:41:11 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_decrypt" file="scr_scanner.c" line="478" message="EVP_DecryptFinal failed"
2014:06:19-18:41:11 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_server_cmd" file="scr_scanner.c" line="660" message="cffs05.astaro.com: decrypt failed"


After this it appears all categorization failed, none recieved, but browsing functioned:
2014:06:19-22:36:50 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x14df8ab8" function="sc_categorize_u
rl_remote" file="scr_scanner.c" line="991" message="no categorization received for url: ui.skype.com/.../getlatestversion
?ver=6.5.0.158&uhash=zzzzzzzzzzzzzzzzzzzz"
2014:06:19-22:37:38 utm httpproxy[5265]: id="0003" severity="info" sys="SecureWeb" sub="http" request="0x14e686b0" function="sc_categorize_u
rl_remote" file="scr_scanner.c" line="991" message="no categorization received for url: icons.wxug.com/.../clear.gif"


Today it appears categorization is continuing to fail:
2014:06:20-12:56:06 utm httpproxy[5265]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET"
srcip="192.168.3.15" dstip="184.51.113.147" user="" statuscode="304" cached="0" profile="REF_DefaultHTTPProfile (Default Proxy)" filteraction="
REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x8e01600" url="icons.wxug.com/.../clear.gif" exception
s="" error="" category="9999" reputation="neutral" categoryname="Categorization failed"


Provided I've not mangled my greps I didn't observe any successful caregorizations since 18:41 UTM time (UTC-4) June 19.

Switching updating to the latest 9.1xx and to SXL is under consideration but I'd like to understand the current problem(s) more fully as well as let any bugs shake out of the latest updates before moving forward.


This thread was automatically locked due to age.