IronPort - Configuration Guide - AsyncOS 7.6.1

15-6
Internet access to the Cisco IronPort Systems update servers.
A web browser (see Browser Requirements, page 2-2).
Cisco IronPort AsyncOS 7.6 for Email Configuration Guide
Chapter 15 System Administration
Note For this release, if you need to configure a firewall setting to allow HTTP access to this address, you
must configure it using the DNS name and not a specific IP address.
Hosting a Remote Upgrade Image
For hosting AsyncOS update files, you must have a server in your internal network that has:
A web server — for example, Microsoft IIS (Internet Information Services) or the Apache open
source server — which:
– supports the display of directory or filenames in excess of 24 characters
– has directory browsing enabled
– is configured for anonymous (no authentication) or basic (“simple”) authentication
– contains at least 350MB of free disk space for each AsyncOS update image
After setting up a local server, go to http://updates.ironport.com/fetch_manifest.html to
download a ZIP file of an upgrade image. To download the image, enter your serial number and the
version number of the Cisco IronPort appliance. You will then be presented with a list of available
upgrades. Click on the upgrade version that you want to download, and unzip the ZIP file in the root
directory on the local server while keeping the directory structure intact. To use the upgrade image,
configure the appliance to use the local server on the Edit Update Settings page (or use updateconfig
in the CLI).
The local server also hosts an XML file that limits the available AsyncOS upgrades for the Cisco
IronPort appliances on your network to the downloaded upgrade image. This file is called the “manifest.”
The manifest is located in the asyncos directory of the upgrade image ZIP file. After unzipping the ZIP
file in the root directory of the local server, enter the full URL for the XML file, including the filename,
on the Edit Update Settings page (or use updateconfig in the CLI).
For more information about remote upgrades, please see the Cisco IronPort Knowledge Base or contact
your Cisco IronPort Support provider.
Note Only use a local update server for AsyncOS upgrade images, not security update images. When you
specify a local update server, the local server does not automatically receive updated security updates
from Cisco IronPort, so the appliances in your network eventually become out of date. Use a local update
server for upgrading AsyncOS, and then change the update and upgrade settings back to use the Cisco
IronPort update servers so the security services update automatically again.
Configuring Upgrade Settings from the GUI
Update settings include the source for the AsyncOS upgrade (remote or streaming), the interface to use
to download the upgrade, and proxy server settings. In addition to AsyncOS upgrades, you can also edit
settings for various Cisco IronPort services such as anti-spam, ant-virus, and Outbreak Filter services.
For information about updating services, see Service Updates, page 15-10.
Step 1 Click Edit Update Settings on the Security Services > Service Updates page.
OL-25136-01