Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Regardless of which upgrade method you use, you should also consider saving your configuration via 
the 

saveconfig

 command after your upgrade is complete. For more information, see “Managing the 

Configuration File” in the Cisco IronPort AsyncOS for Email Daily Management Guide.

If you are upgrading clustered machines, please see “Upgrading Machines in a Cluster” in the 
“Centralized Management” chapter of the Cisco IronPort AsyncOS for Email Advanced Configuration 
Guide.

In Streaming upgrades, your Cisco IronPort appliance connects directly to the Cisco IronPort update 
servers to find and download upgrades:

Cisco IronPort Systems uses a distributed upgrade server architecture to make sure customers can 
quickly download AsyncOS upgrades wherever in the world they are located. Because of this distributed 
server architecture, the Cisco IronPort update servers use dynamic IP addresses. If you have strict 
firewall policies, you may need to configure a static location for AsyncOS upgrades. For more 
information, see 

You will need to create a firewall rule to allow downloading of upgrades from Cisco IronPort update 
servers on ports 80 and 443. If you have any existing firewall rules allowing download of legacy 
upgrades from 

upgrades.ironport.com

 on ports such as 22, 25, 80, 4766, they will need to be removed 

and/or replaced with revised firewall rules. For more information, see 

.

The McAfee Anti-Virus and Cisco IronPort AsyncOS update servers use dynamic IP addresses. If you 
have strict firewall policies, you may need to configure a static location for updates and AsyncOS 
upgrades. 

Your IronPort Appliance

IronPort Systems 

Update Servers

HTTP connection through firewall