Cisco Cisco Web Security Appliance S360 Guía Del Usuario
12-27
AsyncOS 9.2 for Cisco Web Security Appliances User Guide
Chapter 12 Perform System Administration Tasks
AsyncOS for Web Upgrades and Updates
Once the CSR has been generated, submit it to a certificate authority (CA). The CA will return the
certificate in PEM format.
certificate in PEM format.
If you are acquiring a certificate for the first time, search the Internet for “certificate authority services
SSL server certificates,” and choose the service that best meets the needs of your organization. Follow
the service’s instructions for obtaining an SSL certificate.
SSL server certificates,” and choose the service that best meets the needs of your organization. Follow
the service’s instructions for obtaining an SSL certificate.
Note
You can also generate and sign your own certificate. Tools for doing this are included with OpenSSL,
free software from
free software from
http://www.openssl.org
.
Intermediate Certificates
In addition to root certificate authority (CA) certificate verification, AsyncOS supports the use of
intermediate certificate verification. Intermediate certificates are certificates issued by a trusted root CA
which are then used to create additional certificates. This creates a chained line of trust. For example, a
certificate may be issued by example.com who, in turn, is granted the rights to issue certificates by a
trusted root CA. The certificate issued by example.com must be validated against example.com’s private
key as well as the trusted root CA’s private key.
intermediate certificate verification. Intermediate certificates are certificates issued by a trusted root CA
which are then used to create additional certificates. This creates a chained line of trust. For example, a
certificate may be issued by example.com who, in turn, is granted the rights to issue certificates by a
trusted root CA. The certificate issued by example.com must be validated against example.com’s private
key as well as the trusted root CA’s private key.
AsyncOS for Web Upgrades and Updates
Cisco periodically releases upgrades (new software versions) and updates (changes to current software
versions) for AsyncOS for Web and its components.
versions) for AsyncOS for Web and its components.
In Hybrid mode, upgrades are downloaded automatically whenever available, and are then installed
during specified time windows. To add time windows, or change the current time windows:
during specified time windows. To add time windows, or change the current time windows:
Step 1
Choose System Administration > Upgrade and Update Settings.
Step 2
Click Edit Time Windows.
Step 3
Provide day, start time and duration for each window.
At least two time windows per week must be specified to allow performance of required software
updates. These timings must be:
updates. These timings must be:
•
At least two hours long.
•
No more than four days apart (for instance, if the first selection is Monday, the second may be
Thursday or Friday).
Thursday or Friday).
•
When adding more than two windows, the additional windows may be on any day of the week.
For each timing window, choose day of week, start time, and duration.
Click Submit.
The CLI and the Web application interface may be sluggish or unavailable during the update process.