Cisco Cisco Web Security Appliance S670 User Guide

For downloading AsyncOS upgrade files, you must have a system in your internal network that has a 
web browser  and Internet access to the Cisco update servers. 

If you need to configure a firewall setting to allow HTTP access to this address, you must configure it 
using the DNS name and not a specific IP address.

For hosting AsyncOS upgrade files, a server on the internal network must have a web server, such as 
Microsoft IIS (Internet Information Services) or the Apache open source server, which has the following 
features:

Supports the display of directory or filenames in excess of 24 characters.

Has directory browsing enabled.

Is configured for anonymous (no authentication) or Basic (“simple”) authentication.

Contains at least 350MB of free disk space for each AsyncOS upgrade image.

Configure a local server to retrieve and serve the upgrade files.

Download the upgrade zip file.

Using a browser on the local server, go to

http://updates.ironport.com/fetch_manifest.html

 to download a zip file of an upgrade image. To 

download the image, enter your serial number (for a physical appliance) or VLN (for a virtual appliance) 
and the version number of the appliance. You will then be presented with a list of available upgrades. 
Click on the upgrade version that you want to download. 

Unzip the zip file in the root directory on the local server while keeping the directory structure intact.

Configure the appliance to use the local server using the System Administration > Upgrade and Update 
Settings page or the 

updateconfig

 command.

Local web server with 
access to the Internet

Cisco Update Servers

Web Security Appliances

local HTTP connections

HTTP connection to Internet through firewall