Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[EOL/EOE] [NSM] Error while updating attack database via NSM GUI

0

0

Article ID: KB22504 KB Last Updated: 18 Oct 2020Version: 2.0
Summary:
Note: A product listed in this article has either reached hardware End of Life (EOL) OR software End of Engineering (EOE).  Refer to End of Life Products & Milestones for the EOL, EOE, and End of Support (EOS) dates.
This article describes the issue of an error being generated when the attack database is updated via the NSM GUI.

 
Symptoms:
Error Message:

An error occurred. The cause could be one more of the following:
1. Invalid URL
2. Un trustable Server Certificate
3. If Proxy is enabled in the Preferences, Please check the Proxy settings.

Unable to connect to the URL: https://services.netscreen.com/restricted/sigupdates/nsm-updates /NSM-SecurityUpdateInfo.dat

Please check your download settings in Tools menu, Preferences, Attack Object.




 
Solution:
  1. Check #nslookup services.netscreen.com:

    Sample output :
    # nslookup services.netscreen.com
    Server: 10.209.194.14 (DNS Server )
    Address: 10.209.194.14#53 (DNS Server )
    Non-authoritative answer:
    Name: services.netscreen.com
    Address: 207.17.137.227
    If this fails to resolve the IP address, verify if /etc/resolv.conf has the correct nameserver listed.

    Sample Output :
    # cat etc/resolv.conf
    nameserver 10.209.194.14
    

  2. Check if you can download the Attack update.dat file from services.netscreen.com:
    #wget https://services.netscreen.com/restricted/sigupdates/
    nsm-updates/NSM-SecurityUpdateInfo.dat
    

    Sample Output :

    # wget https://services.netscreen.com/restricted/sigupdates/nsm-updates/NSM-SecurityUpdateInfo.dat
    --10:40:20-- https://services.netscreen.com/restricted/sigupdates/nsm-updates/NSM-SecurityUpdateInfo.dat
    => `NSM-SecurityUpdateInfo.dat'
    Resolving services.netscreen.com... 207.17.137.227
    Connecting to services.netscreen.com|207.17.137.227|:443... connected.
    HTTP request sent, awaiting response... 200 OK
    Length: 3,739 (3.7K) [text/plain]
    100%[====================================================================>] 3,739 --.--K/s
    


    If this fails, verify that /etc/nsswitch.conf has at least the following line of config hosts - files dns.

    Sample output:
    cat /etc/nsswitch.conf | grep hosts
    #hosts: db files ldap nis dns
    hosts: files dns
    

Note: If you have made any changes to any of these files, restart the NSM services for the changes to take effect.
Modification History:
2020-10-18: Tagged article for EOL/EOE.
 
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search