Hi,
Both of the TE-1000X Applainces are connected to the internet - but they don't update the TE Enigne..
The "tecli a e v" command show the 56.990002329 and when I try to initialize a manual update with the tecli command nothing happens.. is there an other command to Update the TE Enigne?
Br
Hi Robert,
sorry for the confusion - we did not add the deployment Schedule for the new TE engines to the SK:
Threat Emulation Engine Update - What's New?
TE engine version 7 was never released to local SandBlast appliances and TE engine version 7.1.1 is currently deployed:
Date | Entity | Site/Percent | Status |
Jun 25th | Appliance | 10%(grp1) | Done |
Jun 27th | Appliance | 30%(grp1,3,5) | Done |
Jun 28th | Appliance | 60%(grp1,3,5, 2,4,6) | Done |
Jul 2th | Appliance | 100% (grp1,2,3,4,5,6,7,8,9, 10,Gulliver) |
So depending on the "gradual update group" your appliance is configured for you need to wait a few days unless you get the new engine. You can find the gradual update group by running # tecli advanced schema all. The gradual update group number is selected randomly once for your management server - so it is an environment wide setting for all appliances using TE within this management domain. Also we select the groups randomly for deployment - so it´s not always the same group we start with.
Regards Thomas
Check for general connection to Threat Cloud Update servers:
# ping te.checkpoint.com
# curl –vk https://te.checkpoint.com
Start update:
# tecli a d u a
If you have any issues with olf files. You can delete all existing images and start again:
Delete old images:
# rm –rf /var/log/files_repository/images
Kill Threat Emulation daemon and restart update
# fw kill ted
# tecli a d u a
--> Feedback regarding the update process can be obtained in the following Logfiles:
$FWDIR/log/ted.elg
$FWDIR/log/te_file_downloader.elg
$FWDIR/log/te_engine_log
Regards
Heiko