CWP Agent on Linux fails to update virus definitions when HTTPS proxy is configured

Products

• Cloud Workload Protection

Issue/Introduction

You downloaded CWP Agent installer for Linux with configured HTTPS Proxy and installed on the Linux OS. 

You observed that CWP Agent communicates successfully with the CWP Portal, but Anti-Malware Virus definitions are not getting updated. 

Environment

Release : 1

Cause

AMD LiveUpdate component uses environment variable to setup the proxy for its service. 

There is a known issue for the CWP Agent version lower than 6.8.2.80 with HTTPS proxy communication.  

 

Resolution

If you are using CWP Agent on Linux version lower than 6.8.2.80 with HTTPS proxy configured you have to perform the following to resolve the issue:

 

#1 Upgrade CWP Agent to the version 6.8.2.80

OR

#2 Implement the workaround

• Edit sisamddaemon.service file located under /etc/systemd/system

vim /etc/systemd/system/sisamddaemon.service

Environment=https_proxy=https://<HTTPS Proxy IP Address>:<HTTPS Proxy Port>

Example: Environment=https_proxy=https://192.168.1.254:8080

• Edit AnitMalware.ini file located under /opt/Symantec/sdcssagent/AMD/system 
• Modify liveupdate.lu.period from 7200 to 120 
• Restart AntiMalware service and confirm LiveUpdate Virus Definitions were updated successfully.
• Revert the liveupdate.lu.period settings back to the default 7200