Randomly, a number of times per day, DDAN sends an alert informing about unsuccessful component update.
Deep Discovery Analyzer was unable to update the following components:
Deep Discovery Malware Pattern
Unable to download Deep Discovery Malware Pattern.
Affected appliance: DDAN (10.x.x.x | FE80::EExx:BBxx:FExx:xxxxx)
Verify the following:
- The product is activated.
- The ActiveUpdate server is accessible.
- Virtual Analyzer is not importing images or configuring instances.
- The appliance is not shutting down.
For details, see the Administrator's Guide. If the issue persists, contact your support provider.
There are times when the update server is not serving files because it is loading a new pattern or engine. Unfortunately, this cannot be prevented because the time when Trend Micro is loading a new pattern or engine to active update is not at predetermined times and can occur randomly.
As a workaround, you may adjust the scheduling of the updates and set it for intervals/times other than 15, 30, 45 minutes past the hour as these are times when we would commonly reload the patterns and engines on the Update server.
To prevent this from happening some users choose to change the update interval to Daily.
You can adjust the update schedule under Administration > Updates > Component Update Settings.
You can also configure the frequency of this alert under Alerts / Reports > Alerts > Rules > Component Update Unsuccessful > Alert frequency.
To summarize, your options are either to adjust update scheduling, alert setting or ignore the failed attempts since they will be followed by retrials until a successful update occurs.