Firewall_doc_en_IPS-AntiVirus-Signature-Update-Problem-V1-00_20101201.pdf

IPS/Anti-Virus Signature Update Problem

This chapter is talking about how to debug IPS/Anti-Virus signature update issue, keeps your signatures

are up-to-date can avoid malicious incursion.

The D-Link firewall signature database is updated on a daily basis with new Virus/IPS signatures. Older

signatures are seldom retired but instead are replaced with more generic signatures covering several

viruses. The local NetDefendOS copy of the signature database should therefore be updated regularly and

this updating service is enabled as part of the subscription to the D-Link IPS/Anti-Virus subscription.

If you can’t update your firewall signatures, please follow below troubleshooting guide and try to fix your

problem.

Troubleshooting Guide

For better understanding on how to solve these issues, given below is a list of troubleshooting steps for a

test case scenario.

[Symptom]

[Syptom1: IPS/Anti-Virus Update Fail]

[Step 1] Check your IPS/Anti-Virus license keys expiration dateline, if keys are expire, please purchases

new license to extend expiration date.

Via WebUI:

Via CLI, issue “license” command, and you can see:

[Syptom2: Fail to look up update server]

Please make sure if firewall has correct UTM update server IP addresses.

[Step 2] Login to CLI.

[Step 3] Check update servers status, please issue “updatecenter –servers” command.

[Step 4] If you can’t see server IP addresses like above, please check DNS server configuration, make

sure all DNS servers are workable.

[Step 5] Please make sure DNS servers can resolution URL: dl‐lic.clavister.com .