Cisco Cisco Web Security Appliance S670 User Guide

Page of 784
 
Chapter 26      System Administration
Configuring Upgrade and Service Update Settings
26-44
Cisco IronPort AsyncOS 7.0 for Web User Guide
OL-23079-01
IronPort Systems uses a distributed update server architecture to make sure 
customers can quickly download updates and AsyncOS upgrades wherever in the 
world they are located. Because of this distributed server architecture, the 
IronPort update servers use dynamic IP addresses. If you have strict firewall 
policies, you may need to configure a static location for AsyncOS upgrades. For 
more information, see 
.
Configuring a Static Address for the IronPort Update Servers
The IronPort update servers use dynamic IP addresses. If you have strict firewall 
policies, you may need to configure a static location for updates and AsyncOS 
upgrades. If you determine that your firewall settings require a static IP address 
for updates, complete the following steps:
Step 1
Contact IronPort Customer support to obtain the static URL address.
Step 2
Navigate to the System Administration > Upgrade and Update Settings page, and 
click Edit Update Settings
Step 3
On the Edit Update Settings page, in the “Update Servers (images)” section, 
choose Local Update Servers and enter the static URL address received in step 
.
Step 4
Verify that IronPort Update Servers is selected for the “Update Servers (list)” 
section.
Step 5
Submit and commit your changes.
Upgrading from a Local Server
The Web Security appliance can download AsyncOS upgrades from a server 
within your network instead of obtaining upgrades directly from the IronPort 
update servers. When you use this feature, you only download the upgrade image 
from IronPort one time, and then serve it to all Web Security appliances in your 
network.
 shows how Web Security appliances download upgrade images from 
local servers.