IPS Sensor Error: GAM update Server not reachable

[User76229935]

Hi, We have HA-IPS sensor with model IPS-NS5100, one sensor successfully connect to GAM Server but another sensor is failed. What is the possibility that caused this error? We are using NSM version 9.2.5.27

[kylekat · Accepted solution]

Hello,

More often than not, when i observe GAM update issues it is DNS problems. Have you tried pinging the following from sensor CLI?:

tau.mcafee.com                        80.237.238.81, 217.172.176.87, 138.201.20.29

tau-europe.mcafee.com          161.69.161.30
tau-usa.mcafee.com                161.69.29.249

tau1-2.mcafee.com                  80.237.238.82
tau1-3.mcafee.com                  62.75.131.5
tau1-4.mcafee.com                  138.201.20.49
tau-usa1.mcafee.com              64.34.163.238
tau-usa2.mcafee.com              8.21.163.5
tau-asia.mcafee.com               161.69.207.65

Also make sure automatic updating is enabled or you can try manual:

https://docs.mcafee.com/bundle/network-security-platform-9.2.x-product-guide/page/GUID-94FCB067-B0AE...

Lastly, I always observed issued with GAM engine updates in my 9.2 firmwares, I was told by support that this was fixed in 10.1.5 which is where i am currently migrating my infra to.

[User76229935]

Hi kylekat,

Thanks for your feedback. below are ping result as you suggested:

tau.mcafee.com                        80.237.238.81 (ok), 217.172.176.87(failed), 138.201.20.29 (ok)

tau-europe.mcafee.com          161.69.161.30 (failed)
tau-usa.mcafee.com                161.69.29.249 (failed)

tau1-2.mcafee.com                  80.237.238.82 (ok)
tau1-3.mcafee.com                  62.75.131.5 (failed)
tau1-4.mcafee.com                  138.201.20.49 (ok)
tau-usa1.mcafee.com              64.34.163.238 (ok)
tau-usa2.mcafee.com              8.21.163.5 (failed)
tau-asia.mcafee.com               161.69.207.65 (failed)

and GAM Automatic Download already set to enabled. I haven't try to update manually and maybe we will consider to upgrade the firmware later.

Thank You.

[User27622125]

Hi Friend,

I need your help regarding gam updates.I am still getting error on updating gam on manager.Manager says that he has successfully deployed gam version on sensor but when i go to summary devices then it shows incorrect version.Bro I have also tried to ping ip from sensor but response is failed.Is it possible that there is restriction on connectivity or this is firmware version 9.2 issue.I raised service request and they advised me to upgrade to version 9.2.5.162 that is hot fix but after up gradation issue did not resolved.

[fkazi04]

Hi @User27622125 

It's quite unusual that GAM update issue wasn't fixed after updating the Sensor software version. Please let me know the Service Request number (you may message me privately) where I would have change to go through the attached Sensor trace and get back to you.