DAT download blocked by SonicWALL Gateway scanning

Technical Articles ID: KB58039
Last Modified: 2/5/2020

Environment

McAfee ePolicy Orchestrator (ePO) 5.x

SonicWALL PRO Series Firewall and VPN

Problem

ePO Repository Pull task fails. Entries in Task Logs show Repository Pull tasks with status of Failed:

ERROR: Failed to download file Current\(...)\0000\dat-XXXX.zip from site ftp.nai.com:21, error code 10054
(An existing connection was forcibly closed by the remote host)

Problem

The EpoApSvr.log displays the following:

E #5536 naInet FTP session 1 socket 8128 RecvTimeout() failed on recv, WSAGetLastError() = 10054
E #5536 naInet FTP session 1 socket 6416 RecvTimeout() failed on recv, WSAGetLastError() = 10054
E #5536 naInet FTP session 1 Socket error occurred: 10054
I #5536 SIM_InetMgr Download file dat-4670.zip failed in session 1, nainet ret=0
e #5536 SiteMgr CheckInMirrorPackage: Download file dat-4670.zip from site McAfeeFtp::Current\VSCANDAT1000\DAT\0000 failed, hr=-2147467259
I #5536 McUpload Start http session login...
I #5536 McUpload End http session login, status=0
I #5536 McUpload Http response status code = 200
I #5536 naInet HTTP Session closed

Problem

Antivirus scanning is enabled on the firewall or gateway.

Cause

The gateway is triggering on the McAfee DAT .zip or .tar file because the ReadMe.txt file contains the EICAR antivirus test string (www.eicar.com).

Solution

Disable detection of the EICAR test file on the SonicWALL Firewall:

Connect to the web configuration for the SonicWALL Firewall.
Click Security Services, Gateway Anti-Virus.
Click Configure Gateway AV Settings.
Select Disable detection of EICAR test file.

NOTE: Or, you can add the following two McAfee download websites to the Gateway AV Exclusion List.

update.nai.com
ftp.nai.com

Affected Products

ePolicy Orchestrator 5.9
ePolicy Orchestrator 5.10.x
Install/Uninstall

Languages:

This article is available in the following languages:

English United States
Japanese

Glossary of Technical Terms

Highlight Glossary Terms

Please take a moment to browse our Glossary of Technical Terms.

DAT download blocked by SonicWALL Gateway scanning

Environment

Problem

Problem

Problem

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Title

Title

Featured Solutions

Explore Our Portfolio

Security Outcomes

Industries

Products

Featured Solutions

Explore Our Portfolio

MVISION Products

Services & Training

Threat Research

Our Researchers

Threat Landscape Dashboard

Tools

Contact Us

Resources

Downloads

Product Help

Connect with Us

Explore

Our Company

Our Efforts

Other Resources

Careers

Partnerships

DAT download blocked by SonicWALL Gateway scanning

Environment

Problem

Problem

Problem

Cause

Solution

Affected Products

Languages:

Glossary of Technical Terms

Choose your region

Title

Title