Network Router User Manual

Configuring an Alternate Update location
Use the Alternate Update Server page in the Update Settings policy on the
SiteProtector Console if you want to update your Enterprise Scanner appliance
from within your network instead of getting updates from the IBM ISS Download
Center.
About this task
By default, an agent receives updates from the IBM ISS Download Center. You can
also update your agent from a locally managed SiteProtector X-Press Update
Server (XPU Server) instead. The SiteProtector XPU Server mirrors and caches
updates from the IBM ISS Download Center.
If you do not use an X-Press Update Server, every appliance must have access to
the Internet so that it can download its own updates from the IBM ISS Download
Center. An X-Press Update Server provides these advantages:
v Security is greater because only the Server needs access to the Internet.
v The use of Internet bandwidth is reduced because you need to download the
update to the Server just once for all the appliances that use the Server.
Procedure
1. From the SiteProtector Console, create a tab to display agent policies.
2. In the navigation pane, select a group, and then open the Update Settings
policy for that group.
3. Select the Use Alternate Update Server check box.
4. Provide the following information:
Option Description
Host or IP The DNS name or IP address of the
SiteProtector update server that provides
update downloads to the agent.
Name The port that the agent uses to communicate
with the SiteProtector update server. The
SiteProtector X-Press Update Server listens
for update requests on this port.
Note: By default, the agent uses port 443 to
communicate with the IBM ISS Download
Center at http://www.iss.net. The
SiteProtector server uses port 3994 by
default. For more information about
configuring ports on the SiteProtector server,
see your IBM SiteProtector documentation.
Chapter 12. Updating Enterprise Scanner 151