Have an account?

  •   Personalized content
  •   Your products and support

Need an account?

Create an account

Cisco ScanCenter Administrator Guide, Release 5.2

Book Contents
Find Matches in This Book
Available Languages
Download Options

Book Title

Cisco ScanCenter Administrator Guide, Release 5.2

Chapter Title

Hosted Configuration

Results

Updated:
April 11, 2019

Chapter: Hosted Configuration

Hosted Configuration

The hosted configuration area of Cisco ScanCenter enables you to upload and manage configuration files such as for PAC (proxy auto-config) and Cisco AnyConnect Secure Mobility Web Security.

Note the following prerequisites when working with hosted configuration:

  • Test the PAC files to ensure that they function correctly before uploading them to Cisco ScanCenter.

  • Upload the unscrambled version of the AnyConnect Web Security configuration file. The file is scrambled before it is served to your users, but you will still be able to download the plain text version.

  • Allow access to the ingress IP addresses of the CWS towers/proxies for AnyConnect Web Security using TCP port 443 (and port 8080 in the case of deploying in plain mode). The list of proxies can be found at http://80.254.145.118/websecurity-config-v2ip.xml. This applies to the AnyConnect Web Security client in general, regardless of hosted configuration.

  • The client itself must also be able to access 80.254.145.118 on TCP port 80 which it uses to fetch the list of proxy towers and keep itself up to date. This applies to the AnyConnect Web Security client in general, regardless of hosted configuration.

  • Allow the AnyConnect Web Security module to make connections to Verisign over TCP port 80. On this range, clients check the certificate of revocation at Tj.symcb.com, T1.symcb.com, and T2.symcb.com.

  • The AnyConnect client downloads its configuration files from the resource service through a hardcoded hostname in the AnyConnect binary. The request is made to hostedconfig.scansafe.net (IP address: 46.255.41.2). The exchange is encrypted over TCP port 443.

  • Ensure clients are using the same license key (company/group/user) that is associated with the Hosted Config that is defined and hosted in Cisco ScanCenter.

  • Client machines running the AnyConnect Web Security agent must have the Thawte Primary Root CA and Thawte SSL CA–G2 in the Trusted Root Certification Authority Store.

To view your hosted configuration files, click the Admin tab to display the administration menus. Then, in the Management menu, click Hosted Config.

Uploading a New Configuration File

Procedure

Step 1

Click the Upload Config tab to display the Upload Config page.

Step 2

Click the required file type in the Resource Format box.

Step 3

Enter a unique Description in the box.

Step 4

Click Browse to select a file to upload. There is a maximum file size limit of 500 kilobytes.

Step 5

Click Upload to upload the file.

Managing Configuration Files

When you have uploaded a file you can activate or deactivate it, upload newer versions, and delete versions.

Procedure

Step 1

Click the Admin tab to display the administration menus.

Step 2

In the Management menu, click Hosted Config to display the Hosted Config page.

Step 3

Click the Edit icon.

What to do next

To activate a configuration file, select the Active check box, then click Save. Alternatively, clear the check box to deactivate the configuration file, then click Save.

When there are two or more versions of a file, click Default to enable a specific version, then click Save.

To remove a specific version of a file, click Delete.


Caution

When you click Delete the file will be deleted immediately unless it is the default version. You will not be asked to confirm your action.

Removing Configuration Files

Before you begin

Only configuration files that are inactive can be completely removed.


Caution

Files are removed immediately. You will not be asked to confirm your actions.

Procedure

Step 1

Click the Admin tab to display the administration menus.

Step 2

In the Management menu, click Hosted Config to display the Hosted Config page.

Step 3

Click the Delete icon.

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

Related Cisco Community Discussions

About Us
Contact Us
Work with Us