SecPath F5000-AI160(V7) prompts: no valid license when upgrading signature database

2023-09-25 22:52:45 Published
  • 0 Followed
  • 0Collected ,849Browsed

Network Topology

Not involving

Problem Description

When customers upgrade the four signature libraries of IPS/AV/UFLT/WAF online to F5000-AI-160, there will report: Operation failed because no valid license can be found.


Process Analysis

1.       First check the license installation status and find that all licenses are installed successfully:


2.       First check the license installation status and find that all licenses are installed successfully:

HTTP/1.1 200 OK
Date: Mon, 17 Jul 2023 10:51:14 GMT
Pragma: no-cache
Server: Microsoft-IIS/10.0
Expires: Mon, 17 Jul 2023 10:51:14 GMT
Content-Type: text/xml; charset=utf-8
Cache-Control: max-age=0, no-cache
Content-Length: 344
Proxy-Connection: Keep-Alive
Access-Control-Allow-Origin: http://sso.h3c.com

3.       After IT further analysis of the packet capture file shows that the first step of requesting the download address of the signature database is successful, and the returned download address is: http://downloadcdn.h3c.com/cn/202307/07/20230707_53592_V7-URL-H-1.0 .77_0_30003_0.dat. When downloading the signature library in the second step, the customer MaAfee Web GateWay recorded a 502 badgateway response.

4.       Checking the customer’s proxy getting error 502 from the CDN:



Solution

The customer's own security mechanism blocked the IP of the original CDN node, resulting in the inability to download the signature library. After switching the CDN node, it can be downloaded normally. It has been confirmed that it is not a problem of H3C device.


Please rate this case:   
0 Comments

No Comments

Add Comments: