cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post
Highlighted

Unable to update TE Engine

Hi,

Both of the TE-1000X Applainces are connected to the internet - but they don't update the TE Enigne..

The "tecli a e v" command show the 56.990002329 and when I try to initialize a manual update with the tecli command nothing happens.. is there an other command to Update the TE Enigne?

Br

2 Replies

Re: Unable to update TE Engine

Check for general connection to Threat Cloud Update servers:
# ping te.checkpoint.com
# curl –vk https://te.checkpoint.com


Start update:
# tecli a d u a

If you have any issues with olf files. You can delete all existing images and start again:

Delete old images:
# rm –rf /var/log/files_repository/images

Kill Threat Emulation daemon and restart update
# fw kill ted
# tecli a d u a

 --> Feedback regarding the update process can be obtained in the following Logfiles:
$FWDIR/log/ted.elg
$FWDIR/log/te_file_downloader.elg
$FWDIR/log/te_engine_log

Regards

Heiko

Employee++
Employee++

Re: Unable to update TE Engine

Hi Robert,

sorry for the confusion - we did not add the deployment Schedule for the new TE engines to the SK:

Threat Emulation Engine Update - What's New? 

TE engine version 7 was never released to local SandBlast appliances and TE engine version 7.1.1 is currently deployed:

Date

Entity

Site/Percent

Status

Jun 25th 

Appliance

10%(grp1)

Done

Jun 27th 

Appliance

30%(grp1,3,5)

Done

Jun 28th 

Appliance

60%(grp1,3,5, 2,4,6)

Done

Jul 2th  

Appliance

100% (grp1,2,3,4,5,6,7,8,9, 10,Gulliver)

So depending on the "gradual update group" your appliance is configured for you need to wait a few days unless you get the new engine. You can find the gradual update group by running # tecli advanced schema all. The gradual update group number is selected randomly once for your management server - so it is an environment wide setting for all appliances using TE within this management domain. Also we select the groups randomly for deployment - so it´s not always the same group we start with.

Regards Thomas