Cisco Cisco Content Security Management Appliance M1070 Mode D'Emploi

Page de 414
 
14-19
AsyncOS 8.3.6 for Cisco Content Security Management User Guide
 
Chapter 14      Common Administrative Tasks
  Upgrading AsyncOS
Note
For this release, if you need to configure a firewall setting to allow HTTP access to this address, you 
must configure it using the DNS name and not a specific IP address.
For hosting AsyncOS update files, you must have a server in your internal network that has:
A web server — for example, Microsoft IIS (Internet Information Services) or the Apache open 
source server — that: 
supports the display of directory or filenames in excess of 24 characters
has directory browsing enabled
is configured for anonymous (no authentication) or basic (“simple”) authentication
contains at least 350MB of free disk space for each AsyncOS update image 
Hosting a Remote Upgrade Image
After setting up a local server, go to http://updates.ironport.com/fetch_manifest.html to download a 
zip file of an upgrade image. To download the image, enter your serial number and the version number 
of the Cisco Content Security appliance. You will then be presented with a list of available upgrades. 
Click the upgrade version that you want to download a zip file of the upgrade image. To use the upgrade 
image for AsyncOS upgrades, enter the base URL for your local server on the Edit Update Settings page 
(or use 
updateconfig
 in the CLI).
You can also host an XML file on a local server that limits the available upgrades for the Cisco Content 
Security appliances on your network to the version selected at 
http://updates.ironport.com/fetch_manifest.html
. Your Cisco Content Security appliances still 
download the upgrade from the Cisco servers. If you want to host the upgrade list on a local server, 
download the zip file and extract the 
asyncos/phoebe-my-upgrade.xml
 file to the root directory of the 
local server. To use the upgrade list for AsyncOS upgrades, enter the full URL for the XML file on the 
Edit Update Settings page (or use 
updateconfig
 in the CLI).
For more information about remote upgrades, check the Knowledge Base (see 
) or contact your support provider.
Important Differences in Remote Upgrading Method 
Note these differences when upgrading AsyncOS from a local server (Remote upgrade) as opposed to 
the Streaming upgrade method: 
The upgrade installs immediately while downloading
A banner appears for 10 seconds at the beginning of the upgrade process. While this banner appears, 
you have the option to press Control-C to exit the upgrade process before downloading starts. 
Configuring Upgrade and Service Update Settings
You can configure how the Cisco Content Security appliance downloads security services updates (such 
as time zone rules) and AsyncOS upgrades. For example, you can choose whether to download upgrades 
and updates dynamically from Cisco servers or from a local server onto which you have made the images 
available; configure the update interval; or disable automatic updates.