Cisco Cisco Email Security Appliance C160 Mode D'Emploi
29-8
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 29 System Administration
Managing the Configuration File
Saving and Exporting the Current Configuration File
Using the Current Configuration section of the System Administration > Configuration File page, you
can save the current configuration file to your local machine, save it on the appliance (placed in the
can save the current configuration file to your local machine, save it on the appliance (placed in the
configuration
directory in the FTP/SCP root), or email it to the address specified.
You can mask the user’s passwords by clicking the Mask passwords in the Configuration Files
checkbox. Masking a password causes the original, encrypted password to be replaced with “*****” in
the exported or saved file. Please note, however, that configuration files with masked passwords cannot
be loaded back into AsyncOS.
checkbox. Masking a password causes the original, encrypted password to be replaced with “*****” in
the exported or saved file. Please note, however, that configuration files with masked passwords cannot
be loaded back into AsyncOS.
You can encrypt the user’s passwords by clicking the Encrypt passwords in the Configuration Files
checkbox. The following are the critical security parameters in the configuration file that will be
encrypted.
checkbox. The following are the critical security parameters in the configuration file that will be
encrypted.
•
Certificate private keys
•
RADIUS passwords
•
LDAP bind passwords
•
Local users' password hashes
•
SNMP password
•
DK/DKIM signing keys
•
Outgoing SMTP authentication passwords
•
PostX encryption keys
•
PostX encryption proxy password
•
FTP Push log subscriptions' passwords
•
IPMI LAN password
•
Updater server URLs
Note
For enhanced security, if encryption of sensitive data in the appliance is enabled in FIPS mode,
Plain passwords in the Configuration Files option is not displayed on the web interface.
Plain passwords in the Configuration Files option is not displayed on the web interface.
Loading a Configuration File
Use the Load Configuration section of the System Administration > Configuration File page to load new
configuration information into the Cisco appliance. You can load information in one of three methods:
configuration information into the Cisco appliance. You can load information in one of three methods:
•
Placing information in the
configuration
directory and uploading it.
•
Uploading the configuration file directly from your local machine.
•
Pasting configuration information directly into the GUI.
Configuration files with masked passwords cannot be loaded.
Regardless of the method, you must include the following tags at the top of your configuration:
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE config SYSTEM "config.dtd">
<config>