Unable to Reach ContentUpdate.ca.com

Nyelugo
Nyelugo used Ask the Experts™
on
I have an installation of CA's Desktop Management Suite r11.2 on my subnet. However, I am unable contact contentupdate.ca.com to pickup software definition updates. Port 443 seems to be blocked on our firewall and we do not have local control of this. Also, I'm unable to reach contentupdate.ca.com over any Internet link that bypasses our firewall. Can I get help on this?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Steve JenningsSr Manager Cloud Networking Ops

Commented:
Can you ping it? That is . . . does DNS resolve the name to an IP address? If you try to go to the IP address with your browser does it work? Can you go to other "https" sites on the internet?

So . . .when you say "unable to reach" do you get a "Page not found" a reset . . . what actually happens?

Good luck,
SteveJ

Author

Commented:
SteveJ, no I can't even ping the server. I'm wondering if the address has changed.
Sr Manager Cloud Networking Ops
Commented:
Well, my question was when you try to ping it, does DNS resolve the name to an IP address? Like this:

C:\>ping contentupdate.ca.com

Pinging contentupdate.ca.com [141.202.248.110] with 32 bytes of data:

Request timed out.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 141.202.248.110:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

C:\>

As you can see, I cant "ping the server" either, but DNS resolves the name to an IP address.

The address block is still owned by CA, so I doubt the address has changed.

http://whois.arin.net/rest/net/NET-141-202-0-0-1/pft
http://www.robtex.com/dns/contentupdate.ca.com.html#summary


All that said, I can reach that site via https but the certificate is "bad" ( untrusted certificate authority and the IP address on the cert is different from the actual IP address of the site). So you may be blocked because that's a double red flag for a web site.

I'd contact someone at CA and let them know what's happening.

Good luck,
SteveJ

11/26 Forrester Webinar: Savings for Enterprise

How can your organization benefit from savings just by replacing your legacy backup solutions with Acronis' #CyberProtection? Join Forrester's Joe Branca and Ryan Davis from Acronis live as they explain how you can too.

Author

Commented:
@SteveJ, within my office network which is where the DSM server resides, I always get the response that "Ping request could not find host contentupdate.ca.com. Please check the name and try again."
Steve JenningsSr Manager Cloud Networking Ops

Commented:
So, is your office in the US?

Your response indicates that your DNS is not resolving the name. Try the IP address that my ping resolves to (shown in an earlier post).

Your first issue is to figure out why DNS isn't resolving. Do you have your own DNS or is the DNS you use owned by an ISP?

Good luck,
SteveJ

Author

Commented:
Comment pointed me in the right direction to get our firewall re-configured for access to the ca site.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial