User Guide

33-18
AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide
Chapter 33 System Administration
Setting Up to Obtain Upgrades and Updates
• URL categories (Used for URL filtering features. For details, see Future URL Category Set
Changes, page 15-22)
• Enrollment client (Used for updating certificates needed for communication with cloud-based
services used for URL filtering features. For information, see About the Connection to Cisco Web
Security Services, page 15-3.)
Note Settings for the RSA Email DLP engine and content matching classifiers are handled on the Security
Services > RSA Email DLP page. See About Updating the DLP Engine and Content Matching
Classifiers, page 17-39 for more information.
Service update settings are used for all services that receive updates except DLP updates. You cannot
specify unique settings for any individual service except DLP updates.
To set up the network and the appliance to obtain these critical updates, see Setting Up to Obtain
Upgrades and Updates, page 33-18.
Setting Up to Obtain Upgrades and Updates
• Options for Distributing Upgrades and Updates, page 33-18
• Configuring Your Network to Download Upgrades and Updates from the Cisco Servers, page 33-19
• Configuring the Appliance for Upgrades and Updates in Strict Firewall Environments, page 33-19
• Upgrading and Updating from a Local Server, page 33-19
• Hardware and Software Requirements for Upgrading and Updating from a Local Server, page 33-20
• Hosting an Upgrade Image on a Local Server, page 33-21
• Configuring Server Settings for Downloading Upgrades and Updates, page 33-21
• Configuring Automatic Updates, page 33-23
• Configuring the Appliance to Verify the Validity of Updater Server Certificate, page 33-23
• Configuring the Appliance to Trust Proxy Server Communication, page 33-25
Options for Distributing Upgrades and Updates
There are several ways to distribute AsyncOS upgrade and update files to your appliances:
• Each appliance can download the files directly from the Cisco update servers. This is the default
method.
• You can download the files from Cisco once, and then distribute them to your appliances from a
server within your network. See Upgrading and Updating from a Local Server, page 33-19.
To choose and configure a method, see Configuring Server Settings for Downloading Upgrades and
Updates, page 33-21.