McAfee Web Gateway Update fails

Technical Articles ID: KB94266
Last Modified: 3/18/2021

Environment

McAfee Web Gateway (MWG) 10.0.4, 9.2.8, and 8.2.17

Problem 1

You upgrade using the MWG manager with an update proxy configured. When you click Update appliance software, you see the message Update finished almost immediately.

The file /opt/mwg/log/update/sysconfd.update.log contains the following error message:

Trying Proxy Server: <proxy ip>:<proxy port>
Proxy not reachable, skip update and switch to next configured proxy, if available
Update failed!
None of the Proxy servers are reachable for repository updates. Update Failed.

Even though the proxy itself might be functioning normally, no TCP connection tries to the proxy are visible on a TCP dump during this time.

Problem 2

You perform an offline update using the command mwg-update -o <ISO_name>. The upgrade process instantly fails after the confirmation prompt with the following message:

Do you want to proceed? ([y]es/[n]o)
sh: /usr/bin/yum -y upgrade --nogpgcheck --disablerepo=\* --enablerepo=local: No such file or directory
Ensure mwg services are up and running ...
Yum update failed!

Solution 1

If you performed the upgrade using the MWG GUI or Manager, a separate package is provided to mitigate these upgrade failures. You must install this package before the upgrade action is performed.

This package is cryptographically signed and provided using the same medium as getlogs. For example, appliance.webwasher.com/support/mwg-offline-fix.rpm.

You must restart the sysconfd service after the mitigation package is installed. The upgrade must be initiated from the UI only after this service is restarted.

Connect to the MWG command line interface.
Install the mitigation. Type the following command and then press Enter:

http_proxy=http://<ip of upstream proxy:port> yum install https://appliance.webwasher.com/support/mwg-offline-fix.rpm
Restart sysconfd. Type the following command and then press Enter:

service sysconfd restart
Trigger an update from the manager as normal. The operation completes successfully.

Solution 2

The command line interface method of upgrade, by running yum upgrade yum && yum upgrade, still works correctly. The command line interface is the preferred method of upgrading from the affected releases if your normal mode of upgrade is impacted.

For manual upgrade after installing the package, run mwg-update o <ISO_name>:

Connect to the MWG command line interface.
Download the mitigation package from the URL mentioned above.
Install the mitigation. Type the following command and then press Enter:

yum install mwg-offline-fix-0.1-2.mlos3.mwg.x86_64.rpm
Continue with offline update normally. Type the following command and then press Enter:

mwg-update -o /path/to/image.iso

Affected Products

Upgrade/Migrate
Web Gateway 9.2.x
Web Gateway 8.2.x
Web Gateway 10.0.x

Languages:

This article is available in the following languages:

English United States
Spanish Spain
French
Italian
Portuguese Brasileiro

Knowledge Center

McAfee Web Gateway Update fails

Environment

Problem 1

Problem 2

Solution 1

Solution 2

Affected Products

Languages:

Title

Title

Knowledge Center

McAfee Web Gateway Update fails

Environment

Problem 1

Problem 2

Solution 1

Solution 2

Affected Products

Languages:

Choose your region

Title

Title