Cisco Cisco Content Security Management Appliance M1070 Guía Del Usuario
14-22
AsyncOS 9.6 for Cisco Content Security Management Appliances User Guide
Chapter 14 Common Administrative Tasks
Upgrading AsyncOS
Note
For this release, if you need to configure a firewall setting to allow HTTP access to this address, you
must configure it using the DNS name and not a specific IP address.
must configure it using the DNS name and not a specific IP address.
For hosting AsyncOS update files, you must have a server in your internal network that has:
•
A web server — for example, Microsoft IIS (Internet Information Services) or the Apache open
source server — that:
source server — that:
–
supports the display of directory or filenames in excess of 24 characters
–
has directory browsing enabled
–
is configured for anonymous (no authentication) or basic (“simple”) authentication
–
contains at least 350MB of free disk space for each AsyncOS update image
Hosting a Remote Upgrade Image
After setting up a local server, go to http://updates.ironport.com/fetch_manifest.html to download a
zip file of an upgrade image. To download the image, enter your serial number and the version number
of the Cisco Content Security appliance. You will then be presented with a list of available upgrades.
Click the upgrade version that you want to download a zip file of the upgrade image. To use the upgrade
image for AsyncOS upgrades, enter the base URL for your local server on the Edit Update Settings page
(or use
zip file of an upgrade image. To download the image, enter your serial number and the version number
of the Cisco Content Security appliance. You will then be presented with a list of available upgrades.
Click the upgrade version that you want to download a zip file of the upgrade image. To use the upgrade
image for AsyncOS upgrades, enter the base URL for your local server on the Edit Update Settings page
(or use
updateconfig
in the CLI).
You can also host an XML file on a local server that limits the available upgrades for the Cisco Content
Security appliances on your network to the version selected at
Security appliances on your network to the version selected at
http://updates.ironport.com/fetch_manifest.html
. Your Cisco Content Security appliances still
download the upgrade from the Cisco servers. If you want to host the upgrade list on a local server,
download the zip file and extract the
download the zip file and extract the
asyncos/phoebe-my-upgrade.xml
file to the root directory of the
local server. To use the upgrade list for AsyncOS upgrades, enter the full URL for the XML file on the
Edit Update Settings page (or use
Edit Update Settings page (or use
updateconfig
in the CLI).
For more information about remote upgrades, check the Knowledge Base (see
) or contact your support provider.
Important Differences in Remote Upgrading Method
Note these differences when upgrading AsyncOS from a local server (Remote upgrade) as opposed to
the Streaming upgrade method:
the Streaming upgrade method:
•
The upgrade installs immediately while downloading.
•
A banner appears for 10 seconds at the beginning of the upgrade process. While this banner appears,
you have the option to press Control-C to exit the upgrade process before downloading starts.
you have the option to press Control-C to exit the upgrade process before downloading starts.
Configuring Upgrade and Service Update Settings
You can configure how the Cisco Content Security appliance downloads security services updates (such
as time zone rules) and AsyncOS upgrades. For example, you can choose whether to download upgrades
and updates dynamically from Cisco servers or from a local server onto which you have made the images
available; configure the update interval; or disable automatic updates.
as time zone rules) and AsyncOS upgrades. For example, you can choose whether to download upgrades
and updates dynamically from Cisco servers or from a local server onto which you have made the images
available; configure the update interval; or disable automatic updates.