×
×
×
×

Closed Network Patch DB Failure

Causes

Patch DB Sync happens failure when:

  • The old download tool is being used.
  • Sync data files transferred to the server are incomplete or corrupted. It might be due to proxy or unstable internet connection.
  • The Scheduled DB is Disabled.
  • The updatedb folder moved to the CRS folder is incomplete.

Troubleshooting Steps

1. Verify Download Tool Version

  • Ensure the latest version of the external download tool is being used.
  • If outdated, download the new tool.

2. Check Download Status and Errors

  • Go to the directory where the external tool was executed.
  • Open the dwnload_status.log file. Here check for below-mentioned error codes.

3. Check Exception Traces

  • Open download_tool_log.log (found in the same directory).
  • Search for below-mentioned exceptions. These indicate what went wrong during the sync process.

4. Check HTTP Status Codes

5. Verify the updatedb Folder

  • Ensure the downloaded updatedb folder includes all required .xml and .sql files.
  • If incomplete or corrupt, rerun the external download tool and retransfer the folder.

6. Validate Scheduled Sync

  • In the Patch Manager Plus server console: Navigate to Threats & Patches ---> Update Now; where you can see and validate the Vulnerability DB Sync settings.
  • You can also trigger a manual sync by clicking on Update Now to test if the transfer was successful.

Exceptions

Exception: java.net.SocketTimeoutException: Read timed out

Cause: Timeout during sync due to slow file transfer

Resolution: Ensure the tool runs on a stable LAN. Retry the sync process and check for packet loss.

Exception: java.net.SocketException: Connection reset

Cause: Incomplete file download or early disconnect

Resolution: Stabilize the network connection. Increase timeout duration if required.

Exception: java.net.ConnectException: Connection timed out

Cause: Unable to connect to internal sync endpoint

Resolution: Check the local network route and firewall rules. Ensure the staging server is reachable.

Exception: java.net.ConnectException: Connection refused

Cause: Internal service/port blocked

Resolution: Allow the required port in the firewall. Verify proxy rules if configured.

Exception: java.net.UnknownHostException

Cause: DNS resolution failure

Resolution: Use the IP address directly or fix internal DNS/host mapping issues.

Exception: java.net.ProtocolException: Bug in authorization handling

Cause: Proxy authentication failure or misconfiguration

Resolution: Recheck proxy authentication credentials and verify proxy configuration.

Error Codes

Error Code Name Cause Resolution
10008 Download Failure The download process failed due to a network issue or an internal error. Review the download_tool_log.log file for exception traces to identify the root cause. Once reviewed, retry the download after verifying network connectivity and access to the repository path.
10009 Checksum Mismatch The downloaded file was corrupted or modified during transfer, causing integrity check failure. Use the external download tool to re-download the necessary files. After download, replace the existing folder contents to ensure data consistency.
10010 No Change in File The file on the server is identical to the local copy; no updates were made. No action is needed as the file is already up to date. However, if the sync process still fails, check the completeness of the updatedb folder to rule out partial updates.
0 Latest File Downloaded The latest version of the file was successfully downloaded. This indicates a successful operation and no further action is required. Ensure that the downloaded files are correctly placed inside the updatedb folder for sync to proceed as expected.

HTTP Status Codes

HTTP Status Meaning Cause Resolution
200 / 206 Download Successful The file was retrieved successfully from the server. No further action is needed. The file was downloaded completely without any interruption or error.
404 File Not Found or Link Expired The requested file does not exist on the server or the download link has expired. Re-run the external download tool to generate fresh links and retry the operation. Make sure the sync is targeting the correct database version.
304 Not Modified The file has not changed since the last request, so the server didn’t resend it. No action is required if the file already exists locally. However, if sync issues persist, verify that the file is present and complete in the local folder.
403 Access Denied or Proxy Block The server denied access due to lack of permissions or a proxy-related restriction. Ensure the proxy server isn't blocking access and verify authentication credentials. Update proxy configurations or include valid headers to allow communication.