Virtual ESA appliance update and upgrade using static method

[Bob Neville]

What are the static servers for updates and upgrading if you are using a virtual appliance ?

I know that the if you use a standard appliance they are:

downloads-static.ironport.com: 208.90.58.105 on port 80
update-manifests.ironport.com: 208.90.58.5 on port 443
updates-static.ironport.com: 208.90.58.25 on port 80

But I see that my virtual appliance is trying to go to "update-manifests.sco.cisco.com"   - are there other differences for the virtual appliance ?

[Paul Cardelli]

Yes, I can confirm through my own experiences over the past week that the Virtual Appliances do not use the same update servers.

Virtual Appliances point to dynamichost update-manifests.sco.cisco.com - 208.90.58.6. I'm not sure about the static update IPs, as the static sub domains do not seem to exist on the sco.cisco.com and it looks like Cisco is using Akamai CDN to distribute updates over port 80. You may need to allow iyour Virtual ESAs out on port 80 any, and 443 seems to be a single host.

Also I found the following article most helpful for Virtual ESA Updates:

http://www.cisco.com/c/en/us/support/docs/security/email-security-appliance/118065-maintainandoperate-esa-00.html

[dj_hyperion]

I am currently configuring ESAV on a private network which is not connected to the internet.

How can I update the software and anti-virus offline?

Any ideas?

Thanks

[Ken Stieers]

Not sure about AV...but here's how to set up local upgrade servers.

https://ironport.custhelp.com/app/answers/detail/a_id/1558/kw/local%20upgrade%20server/related/1

[dj_hyperion]

I have downloaded and installed AsyncOS updates sucessfully which is great but the AV updates are still an issue.

I have pointed the ESA to our local web server and it is sending GET requests for /vtl/meter.txt & /vtl/vof_history_year.tgz.

If anyone knows where I can get these update files that would be great!