Cisco Cisco Email Security Appliance C170 사용자 가이드
Chapter 15 System Administration
15-464
Cisco IronPort AsyncOS 7.1 for Email Configuration Guide
OL-22158-02
Figure 15-3
Streaming Update Method
IronPort Systems uses a distributed upgrade server architecture to make sure
customers can quickly download AsyncOS upgrades wherever in the world they
are located. Because of this distributed server architecture, the IronPort update
servers use dynamic IP addresses. If you have strict firewall policies, you may
need to configure a static location for AsyncOS upgrades. For more information,
see
customers can quickly download AsyncOS upgrades wherever in the world they
are located. Because of this distributed server architecture, the IronPort update
servers use dynamic IP addresses. If you have strict firewall policies, you may
need to configure a static location for AsyncOS upgrades. For more information,
see
.
You will need to create a firewall rule to allow downloading of upgrades from
IronPort update servers on ports 80 and 443. If you have any existing firewall rules
allowing download of legacy upgrades from
IronPort update servers on ports 80 and 443. If you have any existing firewall rules
allowing download of legacy upgrades from
upgrades.ironport.com
on ports
such as 22, 25, 80, 4766, they will need to be removed and/or replaced with
revised firewall rules. For more information, see
revised firewall rules. For more information, see
Configuring a Static Address for Streaming Upgrades
The McAfee Anti-Virus and IronPort AsyncOS update servers use dynamic IP
addresses. If you have strict firewall policies, you may need to configure a static
location for updates and AsyncOS upgrades. If you determine that your firewall
settings require a static IP address for updates, complete the following steps:
addresses. If you have strict firewall policies, you may need to configure a static
location for updates and AsyncOS upgrades. If you determine that your firewall
settings require a static IP address for updates, complete the following steps:
Step 1
Contact IronPort Customer support to obtain the static URL address.
Step 2
Create a firewall rule to allow downloading of upgrades from the static IP address
on port 80.
on port 80.
Step 3
Navigate to the Security Services > Service Updates page, and click Edit Update
Settings.
Settings.
Step 4
On the Edit Update Settings page, in the “Update Servers (images)” section,
choose Local Update Servers and enter the static URL received in step
choose Local Update Servers and enter the static URL received in step
in the
Base URL field for AsyncOS upgrades and McAfee Anti-Virus definitions.
Step 5
Verify that IronPort Update Servers is selected for the “Update Servers (list)”
section.
section.
Your IronPort Appliance
IronPort Systems
Update Servers
HTTP connection through firewall