Cisco Cisco Web Security Appliance S170 Guida Utente
26-36
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 26 System Administration
Configuring Upgrade and Service Update Settings
•
Your firewall settings require static IP addresses for the Cisco IronPort update servers. The
Cisco IronPort update servers use dynamic IP addresses. If you have strict firewall policies, you may
need to configure a static location for updates and AsyncOS upgrades. For more information, see
Cisco IronPort update servers use dynamic IP addresses. If you have strict firewall policies, you may
need to configure a static location for updates and AsyncOS upgrades. For more information, see
Note
Only use a local update server for upgrade images, not update images. When you specify a local update
server, the local server does not automatically receive updated security service updates from Cisco, so
the appliances in your network eventually become out of date. Use a local update server for upgrading
AsyncOS, and then change the update and upgrade settings back to use the Cisco IronPort update servers
so the security services update automatically again.
server, the local server does not automatically receive updated security service updates from Cisco, so
the appliances in your network eventually become out of date. Use a local update server for upgrading
AsyncOS, and then change the update and upgrade settings back to use the Cisco IronPort update servers
so the security services update automatically again.
You can configure upgrade and updates settings in the web interface or the CLI. For more information,
see
see
and
.
shows where you configure upgrade and update settings in the web interface.
Figure 26-15
System Administration > Upgrade and Update Settings Page
Updating and Upgrading from the Cisco IronPort Update Servers
The Web Security appliance can connect directly to the Cisco IronPort update servers and download
upgrade images and security service updates. Each appliance downloads the updates and upgrade images
separately.
upgrade images and security service updates. Each appliance downloads the updates and upgrade images
separately.
Cisco uses a distributed update server architecture to make sure customers can quickly download updates
and AsyncOS upgrades wherever in the world they are located. Because of this distributed server
architecture, the Cisco IronPort update servers use dynamic IP addresses. If you have strict firewall
policies, you may need to configure a static location for AsyncOS upgrades. For more information, see
and AsyncOS upgrades wherever in the world they are located. Because of this distributed server
architecture, the Cisco IronPort update servers use dynamic IP addresses. If you have strict firewall
policies, you may need to configure a static location for AsyncOS upgrades. For more information, see
Configuring a Static Address for the Cisco IronPort Update Servers
The Cisco IronPort update servers use dynamic IP addresses. If you have strict firewall policies, you may
need to configure a static location for updates and AsyncOS upgrades.
need to configure a static location for updates and AsyncOS upgrades.
Step 1
Contact Cisco IronPort Customer Support to obtain the static URL address.
Step 2
Navigate to the System Administration > Upgrade and Update Settings page, and click Edit Update
Settings.
Settings.
Step 3
On the Edit Update Settings page, in the “Update Servers (images)” section, choose Local Update
Servers and enter the static URL address received in step
Servers and enter the static URL address received in step
.