18.11.2014 Views

Clavister cOS Core Administration Guide

Clavister cOS Core Administration Guide

Clavister cOS Core Administration Guide

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Chapter 2: Management and Maintenance<br />

When running <strong>cOS</strong> <strong>Core</strong> under a VMware server, upgrades of <strong>cOS</strong> <strong>Core</strong> can be done just as they<br />

are done on a single physical computer. It is not necessary to create a new virtual machine for a<br />

new version.<br />

Checking the Dynamic High Buffers Setting<br />

Make sure that the advanced setting Dynamic High Buffers is enabled after an upgrade. This<br />

setting ensures that sufficient memory is allocated for handling connections.<br />

This setting requires a hardware restart for a new value to take effect. A reconfiguration is not<br />

sufficient. This can be achieved using the CLI command:<br />

Device:/> shutdown<br />

Where <strong>cOS</strong> <strong>Core</strong> is handling tens of thousands of simultaneous connections then it may be<br />

necessary to manually set a value above the automatic value. However, if the HighBuffers value is<br />

set too high this may impact throughput latency.<br />

New Release Notifications<br />

<strong>Clavister</strong> maintains an RSS feed of announcements that can be subscribed to at:<br />

https://forums.clavister.com/rss-feeds/announcements/.<br />

It is recommended to subscribe to this feed in order to receive notifications when new releases<br />

of <strong>cOS</strong> <strong>Core</strong> versions are available for download and installation. Alternatively, announcements<br />

can be read directly from the <strong>Clavister</strong> forums which can be found at:<br />

https://forums.clavister.com/.<br />

2.6.2. Auto-Update Mechanism<br />

A number of the <strong>cOS</strong> <strong>Core</strong> security features rely on external servers for automatic updates and<br />

content filtering. The Intrusion Prevention and Detection system and Anti-Virus modules require<br />

access to updated signature databases in order to provide protection against the latest threats.<br />

To facilitate the Auto-Update feature <strong>Clavister</strong> maintains a global infrastructure of servers<br />

providing update services for <strong>Clavister</strong> Security Gateways. To ensure availability and low<br />

response times, <strong>cOS</strong> <strong>Core</strong> employs a mechanism for automatically selecting the most<br />

appropriate server to supply updates.<br />

For more details on these features see the following sections:<br />

• Section 6.5, “Intrusion Detection and Prevention”<br />

• Section 6.4, “Anti-Virus Scanning”<br />

• Section 6.3, “Web Content Filtering”<br />

• Appendix A, Update Subscriptions<br />

2.6.3. Backing Up Configurations<br />

The administrator has the ability to take a snapshot of a <strong>cOS</strong> <strong>Core</strong> system at a given point in time<br />

and restore it when necessary. The snapshot can be of two types:<br />

• A Configuration Backup<br />

104

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!