Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
AleLovaz82
Contributor
Jump to solution

Anti Bot - Update failed. Gateway can not access internet

Hi mates,

i've a weird issue with antibot update,basically it can't download the DB update

cpstat antimalware -f update_status

AB Update status: failed
AB Update description: Update failed. Gateway can not access internet ("http://dl3.checkpoint.com/paid/8c/8c64a2d75cc48e9d53a994f34f6ee151/amw_db_v8_pkg.tar?HashKey=1677242..."). Check connectivity and proxy settings.
AB Next update description: The next try will be within one hour.
AB DB version: 2302161033
AV Update status:
AV Update description:
AV Next update description:
AV DB version:

but the firewall can reach dl3.checkpoint.com

telnet dl3.checkpoint.com 80
Trying 104.120.112.38...
Connected to dl3.checkpoint.com.

a curl_cli -Lisk http://dl3.checkpoint.com correctly loads.

I've tried to manually force the update according to sk105757 but it doesn't work ,i've seen packets go and come back correctly.
i've attached the .pcap
License and contracts are corrects.

There is not any other firewall between this and Internet.

Any suggestion?

0 Kudos
1 Solution

Accepted Solutions
AleLovaz82
Contributor

problem solved,
a false ips positive, after a minute the http traffic stopped because of this ips signature 

Microsoft Internet Explorer FTP response parsing memory corruption (MS07-016)

i've just added an exclusion and...

cpstat antimalware -f update_status

AB Update status: new
AB Update description: Gateway was updated with database version: 2302161033. Package date: Thu Feb 16 09:00:00 2023
.
AB Next update description: The next update will be run as scheduled.
AB DB version: 2302161033
AV Update status:
AV Update description:
AV Next update description:
AV DB version:

View solution in original post

2 Replies
AleLovaz82
Contributor

problem solved,
a false ips positive, after a minute the http traffic stopped because of this ips signature 

Microsoft Internet Explorer FTP response parsing memory corruption (MS07-016)

i've just added an exclusion and...

cpstat antimalware -f update_status

AB Update status: new
AB Update description: Gateway was updated with database version: 2302161033. Package date: Thu Feb 16 09:00:00 2023
.
AB Next update description: The next update will be run as scheduled.
AB DB version: 2302161033
AV Update status:
AV Update description:
AV Next update description:
AV DB version:

PhoneBoy
Admin
Admin

Did you report the false positive to TAC?

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events