ERROR: McAfee Gateway Anti-Malware update failed.

[vvadim]

Hi, All. Whole week I'm trying to fix the next error on MWG Applience:

05-Jul-2020 06:28:15 EEST ERROR: McAfee Gateway Anti-Malware update failed. Broken version identifier is 'AM-DAT=7129 | AM-Engine=7001.2019.3722 | MFE-DAT=9672 | MFE-Engine=6000.8403 | PLATFORM=x64'. (Origin: McAfee Gateway Anti-Malware, ID: 851)

and today

10-Jul-2020 08:58:23 EEST ERROR: McAfee Gateway Anti-Malware update failed. Broken version identifier is 'AM-DAT=7134 | AM-Engine=7001.2019.3722 | MFE-DAT=9677 | MFE-Engine=6000.8403 | PLATFORM=x64'. (Origin: McAfee Gateway Anti-Malware, ID: 851)

I was tried to: update manually, reboot, trigger update.in central management

After rebooting of this node in UI displaying status of the last update - Never

URL lists updates successfully

other nodes in this central management cluster updates fine

in update.log find next:

[2020-07-10 00:24:52.975 +03:00] Node mwg1. has following update information: [2020-07-10 00:24:52.976 +03:00] Product-Name:McAfee Gateway Anti-Malware [2020-07-10 00:24:52.976 +03:00] Version:0 [2020-07-10 00:24:52.976 +03:00] Broken-Version:AM-DAT=7133|AM-Engine=7001.2019.3722|MFE-DAT=9677|MFE-Engine=6000.8403|PLATFORM=x64 [2020-07-10 00:24:52.976 +03:00] Product-Name:McAfee Web Gateway SSOS Filter [2020-07-10 00:24:52.976 +03:00] Version:SSOS-DAT=69

[2020-07-10 05:08:18.711 +03:00] Status: Update available. Code 10 for product McAfee Gateway Anti-Malware for node: mwg1
[2020-07-10 05:08:18.712 +03:00] McAfee Gateway Anti-Malware Version:0
[2020-07-10 05:08:19.071 +03:00] Start to download files for following nodes: 
[2020-07-10 05:08:19.071 +03:00] Download files for product: McAfee Gateway Anti-Malware
[2020-07-10 05:08:19.071 +03:00] Version:AM-DAT=7133|AM-Engine=7001.2019.3722|MFE-DAT=9677|MFE-Engine=6000.8403|PLATFORM=x64
[2020-07-10 05:08:19.629 +03:00] Successfully downloaded and checked file: mwg7.tar.gz
[2020-07-10 05:08:46.929 +03:00] Successfully downloaded and checked file: datfiles_gwam.tar.gz
[2020-07-10 05:08:58.289 +03:00] Successfully downloaded and checked file: linux.tar.gz
[2020-07-10 05:10:07.362 +03:00] Successfully downloaded and checked file: datfile.tar.gz
[2020-07-10 05:10:18.708 +03:00] Successfully downloaded and checked file: linux0.tar.gz
[2020-07-10 05:10:23.727 +03:00] Update Status from non local Node 
[2020-07-10 05:10:23.727 +03:00] Update Status from non local Node 
[2020-07-10 05:11:36.357 +03:00] Update Status from local Node: 
[2020-07-10 05:11:36.357 +03:00] Product: McAfee Gateway Anti-Malware
[2020-07-10 05:11:36.357 +03:00] Status: update_failed
[2020-07-10 05:11:36.357 +03:00] Old Version: 0
[2020-07-10 05:11:36.357 +03:00] New Version: 0
[2020-07-10 05:34:31.032 +03:00] Update from node 00 (mwg2)
[2020-07-10 05:34:31.032 +03:00] Product: Known CAs (16839)
[2020-07-10 05:34:31.032 +03:00] Version: List=377
[2020-07-10 05:34:31.046 +03:00] Status: update_is_up_to_date

[aloksard · Accepted solution]

Hi,

Hope you are doing well.

Along with this failed GAM update, you should also be seeing GAM service crashing.

You should see below kind of messages in /var/log/messages:-

Jul  8 10:48:49 mwgappllab systemd[1]: Got notification message from PID 1375, but reception only permitted for main PID 3066
Jul  8 10:48:49 mwgappllab systemd[1]: Got notification message from PID 1375, but reception only permitted for main PID 3066
Jul  8 10:49:55 mwgappllab kernel: [168185.431214] traps: gamserver[1377] trap invalid opcode ip:7fda4f8c7a62 sp:7fda695d9490 error:0 in vcpu_zsim.so[7fda4f7d0000+557000]

this is a known issue with GAM 2019

The crash is caused by the ZSIM library. The loading order in v2019 has changed compared to v2017.

This will be fixed in v2019 build 3726.

Fixed build is available to affected customers via "uc-beta" update channel for now.

Alternatively customer can also downgrade to GAM 2017 if you dont want to make use of uc-beta

Rollback to GAM 2017 can be done  using  ud-rollbackGAM2017 parameter

Take MWG GUI->Navigate to option Configuration->Select the appliance->Central Management->Advanced Update Settings->Enter a special custom parameter sequence for an update server->  Add ud-rollbackGAM2017      to get  GAM 2017

Attaching screenshots for reference.  After making above change trigger an manual update.

Was my reply helpful? If you find this post useful, Please give it a Kudos! Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

Regards

Alok Sarda

[vvadim]

Hi, @aloksard 

We have MWG 7.8.2.3 (26967) - this solution is applicable for it?

[aloksard]

Hi,

Yes it is .

Also to check if this VM setup or older MWG appliance model ?

Regards

Alok Sarda

[vvadim]

Thanks. It works

[vvadim]

This is VM on HYPER-V server