PDF(150.9 KB) View with Adobe Reader on a variety of devices
ePub(206.2 KB) View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
Mobi (Kindle)(158.5 KB) View on Kindle device or Kindle app on multiple devices
Updated:August 26, 2021
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This document describes the process that is used in order to upgrade the Cisco Web Security Appliance (WSA) and the Cisco Email Security Appliance (ESA) locally.
The local upgrade process only performs AsyncOS upgrades. it does NOT apply to service engine updates.
Cisco recommends that you have knowledge of the Cisco WSA and ESA standard (online) upgrade procedures.
The information in this document is based on these software versions:
AsyncOS Versions 10.0 and later.
The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.
At times, when the network is congested, attempts to upgrade the WSA or the ESA via the Internet might fail. For example, if there is an available upgrade for an appliance, the AsyncOS downloads it and installs it simultaneously. However, if the network is congested, the download might hang and the upgrade fails. In scenarios such as these, one available option is to upgrade the WSA or the ESA locally.
Upgrades for Appliances that Run AsyncOS Versions 10.0 and Later
In order to upgrade appliances that run AsyncOS Versions 10.0 and later, you must download the AsyncOS upgrade and then apply it to the appliance using a local IIS or Apache server.
Download the AsyncOS Upgrade
Complete these steps in order to download the AsyncOS upgrade:
Note: In this example, 10.5.1-296 for WSA and 10.0.0-203 for ESA are the target versions. You are not required to browse the directory at your HTTP server.
Upgrade the Appliance
Complete these steps in order to configure the ESA to use the local upgrade server:
Navigate toSecurity Services > Service Updatesand clickEdit Update Settings.
Beside theUpdate Servers (images)configuration, click theLocal Update Serversradio button. Change theBase URL (IronPort AsyncOS upgrades)setting to your local upgrade server and appropriate port (local.upgrade.server:80, for example).