Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 606
 
26-35
Cisco IronPort AsyncOS 7.7 for Web User Guide
 
Chapter 26      System Administration
Configuring Upgrade and Service Update Settings
Upgrading AsyncOS for Web from the CLI
Issue the 
upgrade
 command from the CLI to show a list of available upgrades. Select the desired upgrade 
from the list to install it. You may be asked to confirm messages or read and agree to license agreements, 
etc. 
Differences from Traditional Upgrading Method
Please note these differences when upgrading AsyncOS from a local server as opposed to the traditional 
method:
1.
The upgrading installs immediately while downloading
2.
A banner displays for 10 seconds at the beginning of the upgrade process. While this banner is 
displayed, you have the option to type Control+C to exit the upgrade process before downloading 
starts.
Configuring Upgrade and Service Update Settings
You can configure how the Web Security appliance downloads security services updates, such as Web 
Reputation Filters and AsyncOS for Web upgrades. For example, you can choose which network 
interface to use when downloading the files, configure the update interval. or disable automatic updates.
AsyncOS periodically queries the update servers for new updates to all security service components, but 
not for new AsyncOS upgrades. To upgrade AsyncOS, you must manually prompt AsyncOS to query for 
available upgrades. You can also manually prompt AsyncOS to query for available security service 
updates. For more information, see 
.
When AsyncOS queries an update server for an update or upgrade, it performs the following steps:
1.
Contacts the update server.
Cisco allows the following sources for update servers:
  –
Cisco IronPort update servers. For more information, see 
  –
Local server. For more information, see 
2.
Receives an XML file that lists the available updates or AsyncOS upgrade versions. This XML file 
is known as the “manifest.”
3.
Downloads the update or upgrade image files.
By default, AsyncOS contacts the Cisco IronPort update servers for both update and upgrade images and 
the manifest XML file. However, you can choose from where to download the upgrade and update 
images and the manifest file. You might want to specify a local update server for the images or manifest 
file for any of the following reasons:
  •
You have multiple appliances to upgrade simultaneously. If your organization has multiple Web 
Security appliances that need to upgrade, you can download the upgrade image to a web server 
inside your network and serve it to all appliances in your network.