User Guide for Auto Update Server 4.12

Index

A

AAA authentication for immediate auto updates 2-4

ACS

privileges B-1

roles and permissions 1-3

user roles B-3

Adaptive Security Device Manager (ASDM)

adding images 3-2

assigning to multiple devices 4-4

assigning to single device 4-3

configuring image boot order C-2

deleting images 3-3

errors adding image files A-4

managing image file assignments 4-1

managing images 3-1

starting 2-7

viewing device assignments 4-2, 4-3

viewing image list 3-1

API Reader role B-3

API Writer role B-3

Approver role B-2

ASA devices

adding manually 2-3

adding software images 3-2

adding through Security Manager 1-3

adding to Security Manager 1-9

assigning files 4-3, 4-4

blocking auto updates 2-7

bootstrapping to work with AUS C-1

configuring image boot order C-2

credentials for contacting AUS 2-3

deleting 2-6

deleting software images 3-3

editing properties 2-3

errors adding image files A-4

managing 2-1

managing image file assignments 4-1

modifying polling period 2-5

policy restrictions 1-10

supported 1-1

updating configuration files 1-8

using NAT 1-2

viewing configuration files 3-3

viewing image file assignments 4-2, 4-3

viewing summary 2-1

AUS_IMMEDIATE_FAILURE events 5-3

AUS_IMMEDIATE_SUCCESS events 5-3

AUS policy in Security Manager, configuring 1-10

AUS Remote Interface role B-3

authentication errors A-2

Auto Update Immediate

credential requirements 2-4

HTTPS port number requirement 2-6

performing 2-6

auto updates

canceling a schedule 2-5

disabling or blocking 2-7

immediately updating configurations 2-6

modifying polling period 2-5

scheduling 2-4

auto update schedule types

any time 2-4, 2-5

daily 2-4

never 2-5

one time 2-4

weekly 2-4

Auto Update Server

ACS roles B-3

adding devices 1-3

adding to Security Manager 1-9

checking connection to devices A-6

CiscoWorks roles B-2

credentials for device contact 2-3

database backup and recovery 1-3

deploying configuration files 1-8

device support 1-1

error messages A-6

getting started 1-1

logging into or exiting 1-5

overview 1-1

policy restrictions 1-10

privileges B-1

understanding event types 5-2

usage statistics 5-1

user account, configuring 2-3

user interface overview 1-7

using NAT 1-2

B

browser-server security 1-6

C

Cisco Security Management Suite server, logging into or exiting 1-5

CiscoWorks Common Services

logging into or exiting 1-5

roles and permissions 1-3

user roles B-2

configuration files

assigning to device 4-3

deleting 3-3

immediately updating 2-6

managing 3-1

policy restrictions 1-10

preventing a device from downloading A-5

troubleshooting errors A-6

troubleshooting errors adding A-4

troubleshooting files not current A-3

updating 1-8

viewing 3-3

viewing device assignments 4-2, 4-3

viewing list 3-1

CONNECT_FAILURE events 5-3

CONNECT_SUCCESS events 5-3

credentials

editing device 2-3

enable password 2-4

requirements for device contacting AUS 2-3

TACACS+ 2-4

troubleshooting A-2

D

daemon manager, restarting 1-6

database, backup and recovery 1-3

DEVICE_CONFIG_ERROR events 5-3

device managers, starting 2-7

devices

adding manually 2-3

adding through Security Manager 1-3

assigning files 4-3, 4-4

blocking updates 2-7

bootstrapping to work with AUS C-1

checking connection with AUS A-6

configuring image boot order C-2

credentials for contacting AUS 2-3

deleting 2-6

device properties 2-2

editing properties 2-3

managing 2-1

managing image file assignments 4-1

modifying polling period 2-5

rebooting after image update A-5

supported 1-1

troubleshooting

image files that are not current A-4

immediate auto updates A-3

not appearing in list A-1

not contacting AUS A-2

repeatedly downloads same file A-5

viewing image file assignments 4-2, 4-3

viewing summary 2-1

DOWNLOAD_FAILURE events 5-3

DOWNLOAD_SUCCESS events 5-3

E

editing 2-3

enable credentials

authentication for immediate updates 2-4

editing 2-3

error messages A-6

event failure summary report 5-4

event report 5-4

event success summary report 5-5

event types 5-2

F

files

adding 3-2

assigning to multiple devices 4-4

assigning to single device 4-3

deleting 3-3

managing 3-1

managing assignments 4-1

policy restrictions 1-10

troubleshooting errors adding A-4

updating 1-8

viewing configuration 3-3

viewing device assignments 4-2, 4-3

viewing list 3-1

G

GENERAL_DEVICE_ERROR events 5-3

greyed out buttons A-5

GUI Reader role B-3

GUI Writer role B-3

H

Help Desk role

ACS B-3

CiscoWorks B-2

HTTPS port number

requirements for immediate auto update 2-6

requirements for starting device managers 2-7

I

image files

adding 3-2

assigning to multiple devices 4-4

assigning to single device 4-3

deleting 3-3

managing 3-1

managing assignments 4-1

viewing device assignments 4-2, 4-3

viewing list 3-1

immediate auto updates

credential requirements 2-4

HTTPS port number requirement 2-6

performing 2-6

troubleshooting A-3

M

messages, error A-6

mode requirements 1-1

N

NAT, configuring settings 1-2

Network Administrator role

ACS B-3

CiscoWorks B-2

Network Operator role

ACS B-3

CiscoWorks B-2

no contact since report 5-6

P

PIX Device Manager (PDM)

adding images 3-2

assigning to multiple devices 4-4

assigning to single device 4-3

deleting images 3-3

errors adding image files A-4

managing image file assignments 4-1

managing images 3-1

starting 2-7

viewing device assignments 4-2, 4-3

viewing image list 3-1

PIX firewalls

adding manually 2-3

adding software images 3-2

adding through Security Manager 1-3

adding to Security Manager 1-9

assigning files 4-3, 4-4

blocking updates 2-7

bootstrapping to work with AUS C-1

configuring image boot order C-2

credentials for contacting AUS 2-3

deleting 2-6

deleting software images 3-3

editing properties 2-3

errors adding image files A-4

managing 2-1

managing image file assignments 4-1

modifying polling period 2-5

policy restrictions 1-10

supported 1-1

updating configuration files 1-8

using NAT 1-2

viewing configuration files 3-3

viewing image file assignments 4-2, 4-3

viewing summary 2-1

polling interval, modifying 2-5, C-2

R

reports

event failure summary report 5-4

event report 5-4

event success summary report 5-5

no contact since report 5-6

overview 5-1

system information report 5-1

understanding event types 5-2

S

security, enabling SSL 1-6

security context limitations 1-1

Security Manager

adding devices to AUS 1-3

deploying configuration files 1-8

modifying polling period 2-5

policy restrictions when using with AUS 1-10

single-context mode requirements 1-1

software images

adding 3-2

assigning to multiple devices 4-4

assigning to single device 4-3

configuring boot order C-2

deleting 3-3

managing 3-1

managing assignments 4-1

troubleshooting assigning two images to same device A-5

troubleshooting errors adding files A-4

viewing device assignments 4-2, 4-3

viewing list 3-1

SSL, enabling on the server 1-6

statistics for past 24 hours 5-1

SYSTEM_ERROR events 5-3

System Administrator role

ACS B-3

CiscoWorks B-2

system information report 5-1

T

TACACS+ credentials 2-3, 2-4

troubleshooting

assigning two images to same device A-5

AUS startup problems A-5

authentication errors A-2

checking connection between device and AUS A-6

configuration errors A-6

device not appearing in list A-1

device not contacting AUS A-2

device reboot after image update A-5

device repeatedly downloads same file A-5

error messages A-6

errors adding configuration files A-4

errors adding files A-4

greyed out buttons A-5

image files that are not current A-4

immediate auto updates A-3

performance issues when requesting multiple devices contact AUS 2-7

preventing a device from downloading a configuration file A-5

types, understanding event 5-2

U

updates

blocking 2-7

credential requirements for update now 2-4

performing immediate auto updates 2-6

update schedules

any time schedules 2-4, 2-5

canceling 2-5

configuring 2-4

daily schedules 2-4

managing 2-1

never schedules 2-5

one time schedules 2-4

viewing summary 2-1

weekly schedules 2-4

URN for AUS 5-1

usage statistics 5-1

user interface overview 1-7

username, for AUS contact 2-3

user roles and permissions

ACS B-3

AUS B-1

CiscoWorks B-2

supported 1-3

Index

A

AAA authentication for immediate auto updates 2-4

ACS

privileges B-1

roles and permissions 1-3

user roles B-3

Adaptive Security Device Manager (ASDM)

adding images 3-2

assigning to multiple devices 4-4

assigning to single device 4-3

configuring image boot order C-2

deleting images 3-3

errors adding image files A-4

managing image file assignments 4-1

managing images 3-1

starting 2-7

viewing device assignments 4-2, 4-3

viewing image list 3-1

API Reader role B-3

API Writer role B-3

Approver role B-2

ASA devices

adding manually 2-3

adding software images 3-2

adding through Security Manager 1-3

adding to Security Manager 1-9

assigning files 4-3, 4-4

blocking auto updates 2-7

bootstrapping to work with AUS C-1

configuring image boot order C-2

credentials for contacting AUS 2-3

deleting 2-6

deleting software images 3-3

editing properties 2-3

errors adding image files A-4

managing 2-1

managing image file assignments 4-1

modifying polling period 2-5

policy restrictions 1-10

supported 1-1

updating configuration files 1-8

using NAT 1-2

viewing configuration files 3-3

viewing image file assignments 4-2, 4-3

viewing summary 2-1

AUS_IMMEDIATE_FAILURE events 5-3

AUS_IMMEDIATE_SUCCESS events 5-3

AUS policy in Security Manager, configuring 1-10

AUS Remote Interface role B-3

authentication errors A-2

Auto Update Immediate

credential requirements 2-4

HTTPS port number requirement 2-6

performing 2-6

auto updates

canceling a schedule 2-5

disabling or blocking 2-7

immediately updating configurations 2-6

modifying polling period 2-5

scheduling 2-4

auto update schedule types

any time 2-4, 2-5

daily 2-4

never 2-5

one time 2-4

weekly 2-4

Auto Update Server

ACS roles B-3

adding devices 1-3

adding to Security Manager 1-9

checking connection to devices A-6

CiscoWorks roles B-2

credentials for device contact 2-3

database backup and recovery 1-3

deploying configuration files 1-8

device support 1-1

error messages A-6

getting started 1-1

logging into or exiting 1-5

overview 1-1

policy restrictions 1-10

privileges B-1

understanding event types 5-2

usage statistics 5-1

user account, configuring 2-3

user interface overview 1-7

using NAT 1-2

B

browser-server security 1-6

C

Cisco Security Management Suite server, logging into or exiting 1-5

CiscoWorks Common Services

logging into or exiting 1-5

roles and permissions 1-3

user roles B-2

configuration files

assigning to device 4-3

deleting 3-3

immediately updating 2-6

managing 3-1

policy restrictions 1-10

preventing a device from downloading A-5

troubleshooting errors A-6

troubleshooting errors adding A-4

troubleshooting files not current A-3

updating 1-8

viewing 3-3

viewing device assignments 4-2, 4-3

viewing list 3-1

CONNECT_FAILURE events 5-3

CONNECT_SUCCESS events 5-3

credentials

editing device 2-3

enable password 2-4

requirements for device contacting AUS 2-3

TACACS+ 2-4

troubleshooting A-2

D

daemon manager, restarting 1-6

database, backup and recovery 1-3

DEVICE_CONFIG_ERROR events 5-3

device managers, starting 2-7

devices

adding manually 2-3

adding through Security Manager 1-3

assigning files 4-3, 4-4

blocking updates 2-7

bootstrapping to work with AUS C-1

checking connection with AUS A-6

configuring image boot order C-2

credentials for contacting AUS 2-3

deleting 2-6

device properties 2-2

editing properties 2-3

managing 2-1

managing image file assignments 4-1

modifying polling period 2-5

rebooting after image update A-5

supported 1-1

troubleshooting

image files that are not current A-4

immediate auto updates A-3

not appearing in list A-1

not contacting AUS A-2

repeatedly downloads same file A-5

viewing image file assignments 4-2, 4-3

viewing summary 2-1

DOWNLOAD_FAILURE events 5-3

DOWNLOAD_SUCCESS events 5-3

E

editing 2-3

enable credentials

authentication for immediate updates 2-4

editing 2-3

error messages A-6

event failure summary report 5-4

event report 5-4

event success summary report 5-5

event types 5-2

F

files

adding 3-2

assigning to multiple devices 4-4

assigning to single device 4-3

deleting 3-3

managing 3-1

managing assignments 4-1

policy restrictions 1-10

troubleshooting errors adding A-4

updating 1-8

viewing configuration 3-3

viewing device assignments 4-2, 4-3

viewing list 3-1

G

GENERAL_DEVICE_ERROR events 5-3

greyed out buttons A-5

GUI Reader role B-3

GUI Writer role B-3

H

Help Desk role

ACS B-3

CiscoWorks B-2

HTTPS port number

requirements for immediate auto update 2-6

requirements for starting device managers 2-7

I

image files

adding 3-2

assigning to multiple devices 4-4

assigning to single device 4-3

deleting 3-3

managing 3-1

managing assignments 4-1

viewing device assignments 4-2, 4-3

viewing list 3-1

immediate auto updates

credential requirements 2-4

HTTPS port number requirement 2-6

performing 2-6

troubleshooting A-3

M

messages, error A-6

mode requirements 1-1

N

NAT, configuring settings 1-2

Network Administrator role

ACS B-3

CiscoWorks B-2

Network Operator role

ACS B-3

CiscoWorks B-2

no contact since report 5-6

P

PIX Device Manager (PDM)

adding images 3-2

assigning to multiple devices 4-4

assigning to single device 4-3

deleting images 3-3

errors adding image files A-4

managing image file assignments 4-1

managing images 3-1

starting 2-7

viewing device assignments 4-2, 4-3

viewing image list 3-1

PIX firewalls

adding manually 2-3

adding software images 3-2

adding through Security Manager 1-3

adding to Security Manager 1-9

assigning files 4-3, 4-4

blocking updates 2-7

bootstrapping to work with AUS C-1

configuring image boot order C-2

credentials for contacting AUS 2-3

deleting 2-6

deleting software images 3-3

editing properties 2-3

errors adding image files A-4

managing 2-1

managing image file assignments 4-1

modifying polling period 2-5

policy restrictions 1-10

supported 1-1

updating configuration files 1-8

using NAT 1-2

viewing configuration files 3-3

viewing image file assignments 4-2, 4-3

viewing summary 2-1

polling interval, modifying 2-5, C-2

R

reports

event failure summary report 5-4

event report 5-4

event success summary report 5-5

no contact since report 5-6

overview 5-1

system information report 5-1

understanding event types 5-2

S

security, enabling SSL 1-6

security context limitations 1-1

Security Manager

adding devices to AUS 1-3

deploying configuration files 1-8

modifying polling period 2-5

policy restrictions when using with AUS 1-10

single-context mode requirements 1-1

software images

adding 3-2

assigning to multiple devices 4-4

assigning to single device 4-3

configuring boot order C-2

deleting 3-3

managing 3-1

managing assignments 4-1

troubleshooting assigning two images to same device A-5

troubleshooting errors adding files A-4

viewing device assignments 4-2, 4-3

viewing list 3-1

SSL, enabling on the server 1-6

statistics for past 24 hours 5-1

SYSTEM_ERROR events 5-3

System Administrator role

ACS B-3

CiscoWorks B-2

system information report 5-1

T

TACACS+ credentials 2-3, 2-4

troubleshooting

assigning two images to same device A-5

AUS startup problems A-5

authentication errors A-2

checking connection between device and AUS A-6

configuration errors A-6

device not appearing in list A-1

device not contacting AUS A-2

device reboot after image update A-5

device repeatedly downloads same file A-5

error messages A-6

errors adding configuration files A-4

errors adding files A-4

greyed out buttons A-5

image files that are not current A-4

immediate auto updates A-3

performance issues when requesting multiple devices contact AUS 2-7

preventing a device from downloading a configuration file A-5

types, understanding event 5-2

U

updates

blocking 2-7

credential requirements for update now 2-4

performing immediate auto updates 2-6

update schedules

any time schedules 2-4, 2-5

canceling 2-5

configuring 2-4

daily schedules 2-4

managing 2-1

never schedules 2-5

one time schedules 2-4

viewing summary 2-1

weekly schedules 2-4

URN for AUS 5-1

usage statistics 5-1

user interface overview 1-7

username, for AUS contact 2-3

user roles and permissions

ACS B-3

AUS B-1

CiscoWorks B-2

supported 1-3