No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Fat AP and Cloud AP V200R008C00 CLI-based Configuration Guide

Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Update Scenarios

Update Scenarios

This section describes update scenarios of the Central AP.

Central AP signature databases can be updated online, using a proxy server, or locally.

Update Scenario

Description

Online update

The Central AP connects to the update center over the Internet to update the signature databases.

NOTE:

Generally, the update center is the security center platform. Enterprises will create their own update centers if their networks are isolated from the Internet (such as for military sectors).



Signature databases can be updated immediately or as scheduled.

  • Scheduled update

    The Central AP accesses the update center on a scheduled basis to search for the latest signature databases. If the new versions of signature databases are found, the Central AP downloads the latest signature databases to update the local signature databases at scheduled time.

  • Immediate update

    When new signature database on the network, you can immediately update signature databases instead of waiting for the scheduled update.

    The download address and process for updating the signature database immediately is the same as that for the update through scheduled update. The two update modes differ in that immediate update can be performed at any time whereas scheduled update must be implemented at the specified time.

Update using a proxy server

When the Central AP cannot communicate with the update center over the Internet, a proxy server can be used to connect to the update center and download signature databases for the Central AP.

NOTE:

If the proxy server runs the Windows operating system, CCProxy is recommended. If the proxy server runs the Linux operating system, Squid is recommended. Ensure that the proxy server enables the HTTP port and four access methods, namely, PUT, GET, CONNECT, and POST.



The Central AP supports HTTP proxy only. Therefore, the security policy that allows HTTP must be configured. You are advised to update the signature database in local or direct update mode. As HTTP is insecure, strict matching conditions of security policies are required.

Signature databases can be updated immediately or as scheduled via the proxy server.

  • Scheduled update

    The Central AP accesses the update center on a scheduled basis to search for the latest signature databases. If the new versions of signature databases are found, the Central AP downloads the latest signature databases to update the local signature databases at scheduled time.

  • Immediate update

    When new signature database on the network, you can immediately update signature databases instead of waiting for the scheduled update.

    The download address and process for updating the signature database immediately is the same as that for the update through scheduled update. The two update modes differ in that immediate update can be performed at any time whereas scheduled update must be implemented at the specified time.

Local update

When the Central AP is physically isolated from the Internet and no proxy server is deployed on the intranet, you can update signature databases locally.



Translation
Download
Updated: 2019-01-11

Document ID: EDOC1000176006

Views: 116511

Downloads: 309

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next