Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Internet access to the Cisco IronPort Systems update servers. 

A web browser (see 

For this release, if you need to configure a firewall setting to allow HTTP access to this address, you 
must configure it using the DNS name and not a specific IP address.

For hosting AsyncOS update files, you must have a server in your internal network that has:

A web server — for example, Microsoft IIS (Internet Information Services) or the Apache open 
source server — which: 

supports the display of directory or filenames in excess of 24 characters

has directory browsing enabled

is configured for anonymous (no authentication) or basic (“simple”) authentication

contains at least 350MB of free disk space for each AsyncOS update image 

After setting up a local server, go to 

http://updates.ironport.com/fetch_manifest.html

 to 

download a ZIP file of an upgrade image. To download the image, enter your serial number and the 
version number of the Cisco IronPort appliance. You will then be presented with a list of available 
upgrades. Click on the upgrade version that you want to download, and unzip the ZIP file in the root 
directory on the local server while keeping the directory structure intact. To use the upgrade image, 
configure the appliance to use the local server on the Edit Update Settings page (or use 

updateconfig

 

in the CLI).

The local server also hosts an XML file that limits the available AsyncOS upgrades for the Cisco 
IronPort appliances on your network to the downloaded upgrade image. This file is called the “manifest.” 
The manifest is located in the 

asyncos

 directory of the upgrade image ZIP file. After unzipping the ZIP 

file in the root directory of the local server, enter the full URL for the XML file, including the filename, 
on the Edit Update Settings page (or use 

updateconfig

 in the CLI).

For more information about remote upgrades, please see the Cisco IronPort Knowledge Base or contact 
your Cisco IronPort Support provider.

Only use a local update server for AsyncOS upgrade images, not security update images. When you 
specify a local update server, the local server does not automatically receive updated security updates 
from Cisco IronPort, so the appliances in your network eventually become out of date. Use a local update 
server for upgrading AsyncOS, and then change the update and upgrade settings back to use the Cisco 
IronPort update servers so the security services update automatically again.

Update settings include the source for the AsyncOS upgrade (remote or streaming), the interface to use 
to download the upgrade, and proxy server settings. In addition to AsyncOS upgrades, you can also edit 
settings for various Cisco IronPort services such as anti-spam, ant-virus, and Outbreak Filter services. 
For information about updating services, see 

.

Click Edit Update Settings on the Security Services > Service Updates page.