1. Download the TBL pattern zip file
a. Login to the Smart Protection Server's web console
b. Go to the Updates > Source page
c. select the File Reputation tab
d. Assume the source "Trend Micro ActiveUpdate Server" is selected
e. Get the update source URL
E.g., the update source URL is https://slspn30-p.activeupdate.trendmicro.com/activeupdate/
f. Open a browser to download the pattern
i. E.g., Open server.ini from the ActiveUpdate server, {UPDATE SOURCE URL}/server.ini
ii. Search for P.48040107 to get the TBL pattern path, P.48040107=pattern/icrc$tbl.zip
iii. Download the TBL pattern zip file, e.g., https://slspn30-p.activeupdate.trendmicro.com/activeupdate/pattern/icrc$tbl.zip
g. Extract the downloaded .zip file
2. The following steps are for TMSPS 3.2+
3. Use SSH to log in the SPS server console
4. Check if the Smart Scan Pattern update has reached the limit of the counter of continuous download full pattern
If the value of CONT_FULL_TBLPTN_COUNT is 169 in /var/tmcss/conf/FRSUpdateCounter.ini, please reset the counter to 0 before you perform the following steps
FRSUpdateCounter.ini
[UpdateCounter]
CONT_FULL_TBLPTN_COUNT=0
5. Stop the web server
service lighttpd stop
6.Remove all files from /var/tmcss/activeupdate/tmp. If the tmp folder does not exist, create a new tmp folder.
7. Copy the TBL pattern (icrc$tbl.XXX) into /var/tmcss/activeupdate/tmp
8. Change owner of /var/tmcss/activeupdate/tmp to webserv
chown -R webserv:webserv /var/tmcss/activeupdate/tmp
9. Execute the import command below and wait until the command execution has finished
sudo -u webserv /usr/tmcss/bin/UpdateManage.exe --newservimporttbl
10. Start the web server
service lighttpd start
11. Reproduce the problem. If the problem still persists, please help to collect CDT log back