InterScan Web Security Appliance Upgrade Guide - Online Help ...

Trend Micro Incorporated reserves the right to make changes to this document and to 

the products described herein without notice. Before using the IWSA device, please 

review the readme files, release notes and the latest version of the user guides, which 

are available from the Trend Micro Web site at: 

http://www.trendmicro.com/download/documentation/ 

NOTE: A license to the Trend Micro Software usually includes the right to product 

updates, pattern file updates, and basic technical support for one (1) year from the 

date of purchase only. Maintenance must be renewed on an annual basis at Trend 

Micro’s then-current Maintenance fees. 

Trend Micro, the Trend Micro t-ball logo, InterScan, TrendLabs, and Trend Micro 

Control Manager are trademarks or registered trademarks of Trend Micro, 

Incorporated. All other product or company names may be trademarks or registered 

trademarks of their owners. 

Copyright© 1995-2006 Trend Micro Incorporated. All rights reserved. No part of 

this publication may be reproduced, photocopied, stored in a retrieval system, or 

transmitted without the express prior written consent of Trend Micro Incorporated. 

Document Part No. IBEM22857/60915 

Release Date: December 2006 

Protected by U.S. Patent No. 5,623,600; 5,951,698; 5,983,348; 6,272,641

The Upgrade Guide for InterScan Web Security Appliance is intended to help users 

upgrade to the latest version of the product. You should read through it prior to 

upgrading the appliance. 

Detailed information about how to use specific features is available in the online 

help file and online Knowledge Base at the Trend Micro Web site. 

To contact Trend Micro Support, please see Technical Support on page P-3 of this 

document. 

Trend Micro is always seeking to improve its documentation. If you have questions, 

comments, or suggestions about this or any Trend Micro documents, please contact 

us at docs@trendmicro.com. Your feedback is always welcome. 

Please evaluate this documentation on the following site: 

www.trendmicro.com/download/documentation/rating.asp

Contents 

Preface 

InterScan Web Security Appliance Documentation ....................... P-1 

Audience ............................................................................................. P-2 

Technical Support ............................................................................... P-3 

Chapter 1: Upgrading InterScan Web Security Appliance 

Connecting to the Device ................................................................... 1-2 

Updating the Device Firmware .......................................................... 1-8 

Running the Appliance Firmware Flash Utility ............................. 1-8 

Updating the BIOS and BMC ...................................................... 1-10 

Installing the Service Pack ............................................................... 1-15 

Chapter 2: Performing a Rollback 

Rollback Procedure ............................................................................ 2-1 

I

Trend Micro InterScan Web Security Appliance Upgrade Guide 

II

Preface 

Preface 

Welcome to the Trend Micro InterScan Web Security Appliance (IWSA) 

Upgrade Guide. This book contains information about the tasks you need to perform 

to upgrade from IWSA 2.5 or IWSA 2.5 Patch 1 to IWSA 2.5 Service Pack 1. 

InterScan Web Security Appliance 

Documentation 

The IWSA documentation consists of the following: 

• Online Help—Web-based documentation accessible from the Web console that 

contains explanations about the product’s components and features. 

• Upgrade Guide (UG)—PDF document accessible from the IWSA CD or 

downloadable from the Trend Micro Web site. 

• Quick Start Guide (QSG)—PDF document accessible from the IWSA CD or 


The QSG contains instructions on deploying IWSA, a task that includes 

planning, testing, and preconfiguration. 

P-1


P-2 

• Administrator’s Guide (AG)—PDF document accessible from the IWSA CD or 


The AG contains explanation of the IWSA architecture and instructions on how 

to configure and administer IWSA using the applicable management tools. 

Tip: Trend Micro recommends checking the following IWSA links for updates to the 

IWSA documentation and program file: 

http://www.trendmicro.com/download 

http://www.trendmicro.com/en/products/gateway/iwsa/evaluate/overview.htm 

Audience 

The IWSA documentation assumes a basic knowledge of security systems, including: 

• Antivirus and content security protection 

• Network concepts (such as IP address, netmask, topology, LAN settings) 

• Various network topologies 

• Network devices and their administration 

• Network configuration (such as the use of VLAN, SNMP)

Technical Support 

Preface 

There are several ways to obtain technical support. 

• The Trend Micro Knowledge Base, maintained at the Trend Micro Web site, has 

the most up-to-date answers to product questions. You can also use the 

Knowledge Base to submit a question if you cannot find the answer in the 

product documentation. Access the Knowledge Base at: 

http://esupport.trendmicro.com 

• If you are not able to find an answer in the documentation or the Knowledge 

Base, you can email your question to Trend Micro technical support. 

support@support.trendmicro.com 

• For a list of the worldwide support offices, go to: 

http://kb.trendmicro.com/solutions/includes2/ContactTechSupport.asp 

In the United States, you can reach Trend Micro representatives via phone or fax: 

Toll free: +1 (800) 228-5651 (sales) 

Voice: +1 (408) 257-1500 (main) 

Fax: +1 (408) 257-2003 

To speed up the resolution of your product issue, provide the following information 

when you send an email or call Trend Micro: 

• Program version and number (Click About on the main console's footer menu to 

learn about the program version and build number.) 

• Serial number 

• Exact text of the error message, if any 

• Steps to reproduce the issue 

P-3


P-4

Chapter 1 

Upgrading InterScan Web Security 

Appliance 

You can upgrade InterScan Web Security Appliance (IWSA) using the Web 

console and the Appliance Firmware Flash Utility (AFFU). This utility is included on 

the IWSA CD. 

Before you upgrade, please list down your current network settings to ensure that you 

can restore the settings at any time. 

Upgrading to IWSA Service Pack 1 involves the following steps: 

• Connecting to the Device 

• Updating the Device Firmware 

• Installing the Service Pack 

1-1


Connecting to the Device 

1-2 

When connecting to the device: 

• Use a computer running Microsoft Windows with a LAN port and 

configurable IP address, and a CD drive. 

• Log on using an account belonging to the Administrator's group of the local 

computer on which the tool will run. 

• Disable firewall applications on the computer. 

• Prepare the IWSA CD, which contains the Application Firmware Flash Utility. 

To connect your computer to the device: 

1. Connect one end of the cross-over cable to port 5 and the other end to your 

computer. 

2. Connect one end of the console cable (RS-232) to the back of the device and the 

other end to the console port on your computer. 

3. Configure the Local Area Connection properties to use the following settings: 

IP address: 192.168.252.2 (or the same subnet with 192.168.252.x) 

Subnet mask: 255.255.255.0 

Default gateway: 192.168.252.254 

DNS: blank

Upgrading InterScan Web Security Appliance 

Note: After you finish upgrading, do not forget to restore the Local Area Connection 

settings on the computer. 

FIGURE 1-1. Local Area Connection Settings 

1-3


1-4 

4. Open a terminal configuration software such as HyperTerminal for Windows. 

a. Click Start > Programs > Accessories > Communications > 

HyperTerminal. HyperTerminal prompts you for connection information. 

b. Type a name for the connection and click OK. 

FIGURE 1-2. HyperTerminal Connection Description


c. On the Connect To screen, select the communications port where the cable 

is connected. 

FIGURE 1-3. Connect To Settings 

d. Click OK. 

e. On the Properties window, set the following: 

• Bits per second: 115200 

• Data Bits: 8 

• Parity: None 

• Stop bits: 1 

1-5


1-6 

• Flow control: None 

FIGURE 1-4. COM Properties 

f. Click OK. 

g. Click File > Properties, and then click the Settings tab. 

h. Set the following properties: 

• Backspace key sends: Del 

• Emulation: VT100

• Telnet Terminal ID: VT102 

FIGURE 1-5. Connection Settings 


5. Click Terminal Setup and select Block to have a clear view of the cursor 

location. 

6. Click OK. The Connection Settings screen displays. 

7. Click OK to complete the set up. 

8. Turn on or reset the device. 

1-7


1-8 

9. A message appears prompting you to enter rescue mode. To enter rescue mode, 

type r within 5 seconds of seeing the prompt. The InterScan Web Security 

Appliance rescue mode settings appear. 

FIGURE 1-6. Entering Rescue Mode 

Updating the Device Firmware 

Use the Appliance Firmware Flash Utility included in the IWSA CD to update the 

BMC (baseboard management controller) firmware and BIOS (basic input/output 

system). The utility is a graphical user interface tool that provides a user-friendly 

method of uploading the latest device components. 

Running the Appliance Firmware Flash Utility 

Before running the utility, ensure that you are using the latest NIC driver and that you 

have disabled any firewall applications on the computer used with the utility. 

To run the Appliance Firmware Flash Utility: 

1. Using an Administrator account, log on to the computer used with the AFFU.


Note: The account used to log on to the computer on which the utility will run must 

have administrator rights or should belong to the Administrator’s Group. 

Otherwise, the utility cannot successfully execute. 

2. Insert the IWSA CD and launch the Appliance Firmware Flash Utility 

(AFFU.exe). 

The main console appears and automatically searches for connected IWSA 

devices. 

FIGURE 1-7. The Appliance Firmware Flash Utility 

Note: If the utility has not yet detected the IWSA device, click Detect on the toolbar 

menu. The utility then lists connected IWSA devices in the detection table. 

3. Select a detected device from the detection table. 

Note: You can only upgrade one IWSA device at a time. 

1-9


Updating the BIOS and BMC 

1-10 

When updating both the BIOS and BMC, you must enter the correct checksum value to 

continue. Refer to the BIOS/BMC Checksum Reference for the corresponding checksum 

values for your BIOS and BMS. You can find the latest version of the BIOS/BMC Checksum 

Reference (BIOS_BMC_Checksum_Ref.txt) at http://www.trendmicro.com/download or 

from the IWSA CD ({CD Drive}:\Programs\IWSA_FFU\). 

To update the BIOS and BMC: 

1. On the AFFU screen, click Flash BIOS. The Flash screen appears. 

FIGURE 1-8. The Appliance Firmware Flash Utility

2. On the Flash dialog box, perform the following: 


Note: The "Device" field value corresponds to the fixed IWSA device IP in rescue 

mode. 

a. In Update boot block, select Yes. 

WARNING! If a power loss interrupts the BIOS boot block update, BIOS will no 

longer be able to operate. 

b. Type the following user name and password in the corresponding fields: 

User name: iwsa2500 

Password: qZTSpdum 

Note: These values are the default fixed values and the system cannot accept 

any changes to them. 

c. Click Browse to determine the location of the BIOS file (.ROM file). The 

default location of the file on the IWSA CD is 

{CD Drive}:\Programs\AFFU. 

d. Type the BIOS checksum value. 

e. Click OK. 

1-11


1-12 

f. On the warning message that displays, click YES to continue and start the 

AFFU process. 

WARNING! During the Appliance Firmware Flash Utility process, do not turn 

off, reset, or modify any device settings. Wait for the automatic 

reboot before performing any further tasks. 

The utility console displays the progress and informs you of a successful 

BIOS firmware update. 

While refreshing the settings, IWSA enables "failopen" and allows network 

traffic to pass through the device. However, there is approximately 30 

seconds of downtime when the IWSA ports are disconnected from the 

network. The device establishes network connection after refreshing the 

settings. 

3. Turn on the device. A message appears prompting you to enter rescue mode. 

4. Type r at the prompt. The IWSA rescue mode settings appear. 

5. Run the Appliance Firmware Flash Utility again (see steps 2 and 3 in Running 

the Appliance Firmware Flash Utility on page 1-8). 

6. Click Flash BMC. The Flash screen appears.


7. On the Flash dialog box, perform the following: 

a. Type the following user name and password in the corresponding fields: 

User name: iwsa2500 

Password: qZTSpdum 

FIGURE 1-9. The Appliance Firmware Flash Utility 

1-13


1-14 

b. Click Browse for the location of the BMC file (.BIN file). The default 

location of the file on the IWSA CD is {CD Drive}:\Programs\AFFU. 

c. Type the BMC checksum value. 

d. Click OK. A warning message displays. 

e. Click YES to continue and start the Appliance Firmware Flash Utility 

process. A confirmation message displays. 

f. Click OK. The device will automatically shut down after the BMC file 

update. 

WARNING! During the Appliance Firmware Flash Utility process, do not turn 

off, reset, or modify any device setting. 

8. Turn on the device. 

FIGURE 1-10. BIOS Setup Screen 

9. Reset the BIOS to the default settings:

a. Type F4 during the countdown to enter BIOS. 

b. Type the password: qZTSpdum. 

c. Select Exit > Load Optimal Defaults. 

d. Select Save Changes and Exit. 

e. Select OK to exit. 

Installing the Service Pack 


After updating the BMC and BIOS firmware, you are now ready to install IWSA 2.5 

Service Pack 1, which you can perform from the Web console. 

To install the service pack: 

1. Open the Web console. 

2. Click Administration > Update OS. 

FIGURE 1-11. Update OS Screen 

3. Type the location and file name of the OS package or click Browse to locate the 

file on the IWSA folder. The file name is IWSA25_en_us.tar.gz. 

4. Click Update. When the update is finished, restart IWSA to complete the OS 

update. 

5. To verify that the update was successful, open the Web console and click 

Administration > Update OS. The current version should be 

2.6.14.IWSA_2.5.xxxx. 

1-15


1-16 

6. Click Administration > System Patch. 

FIGURE 1-12. System Patch Screen 

7. Type the location and file name of the patch file or click Browse to locate the file 

on the IWSA folder. The file name is iwsa2500_25_ar_en_service_pack1.tgz. 

8. Click Upload. When the upload is finished, restart IWSA to complete the patch 

update. 

9. To verify that the update was successful, open the Web console and click 

Summary. The current version of IWSA should be 2.5 Service Pack 1.

Performing a Rollback 

Chapter 2 

You can roll back the previous version of IWSA using the Web console and the 

Appliance Firmware Flash Utility. The rollback procedure is the same as the upgrade 

procedure. However, to roll back, you must have a previously saved version of the 

image file. 

Rollback Procedure 

To roll back to the previous IWSA version: 

1. Uninstall service pack 1 from the Web console by clicking Administration > 

System Patch. Click Uninstall in the page. 

2. Connect to the device using a terminal configuration software and enter rescue 

mode. See Connecting to the Device for the connection procedure. 

3. Insert the IWSA CD and launch the IWSA Rescue Utility 

(IWSARESCUE.EXE). 

2-1


2-2 

Note: If you are running PC-cillin 2002 or later, set the Personal Firewall settings 

to "low" or "medium" when using the utility. 

FIGURE 2-1. The Rescue Utility 

4. Locate the program file (.r file) and click Update. The default location of the file 

on the IWSA CD is {CD Drive}:\Programs\IWSA_Rescue.


WARNING! During the update, do not turn off, reset the device, or modify any device 

settings. If you uploaded the program file, wait for the device to finish 

the automatic reset. 

FIGURE 2-2. Update Progress 

2-3


2-4 

5. After the update is complete, wait for the device to automatically reboot. 

FIGURE 2-3. Update Successful 

The Preconfiguration login screen appears after this screen.


6. Confirm the update by checking the version in the lower right hand corner of the 

title box on the Preconfiguration login screen. In this example, the IWSA 2500 

version is 2.5 and the program version is 2007. 

FIGURE 2-4. Preconfiguration Login Screen 

2-5


2-6

InterScan Web Security Appliance Upgrade Guide - Online Help ...

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?