11-37
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter11 Configuring Security Manager Administrative Settings
IPS Updates Page
User Name The username to log into the IPS update server. If you are configuring
a local server that does not require a user login, leave this field blank.
If you are specifying a Cisco.com username, the user account on
Cisco.com must be eligible for downloading strong encryption
software. If you are not certain that the account has the required
permissions, use the account to log into Cisco.com and try to download
an IPS update file
(http://www.cisco.com/cgi-bin/tablebuild.pl/ips5-system). If the
account does not have the appropriate permissions, you are prompted
to read and accept the required conditions. If you meet the eligibility
requirements, you can accept them. Otherwise, talk to your Cisco sales
representative for help.
Password
Confirm
The password for the specified username, entered in both fields. If you
are configuring a local server that does not require a password, leave
these fields blank.
Path to Update Files
(Local server only.)
The path to the IPS update files location on your local server. For
example, if update files can be accessed at
http://local-server-ip:port/update_files_path/, then enter
update_files_path in this field.
Connect Using HTTPS
(Local server only.)
Whether to use SSL when connecting to the local IPS Update server.
Certificate Thumbprint Displays the certificate thumbprint after it is calculated from the
certificate on the local server.
Retrieve From Server Used to connect to the local server specified in this dialog box, retrieve
the certificate from the local server given, and calculate the certificate
thumbprint, which is displayed in the Certificate Thumbprint field.
Contact URL •When selected, "Image Meta-data Locator" is used. This is the
URL on Cisco.com that is used to obtain meta-data information
about images. Meta-data information consists of the images
applicable to a particular product, name, size, checksum, and URL
to download for each image.
•When selected, "Other" is used. You can enter any valid HTTPS
URL. This URL is intended primarily for the HTTPS URL to
download the image as obtained from the meta-data information
about the image. This URL may be different from the URL of the
image meta-data locator described in the previous paragraph; the
certificate may be different, as well.
Caution If you choose "Other," you need to explicitly add
"https://dl.cisco.com" [without the quotation marks]: Enter it
in the text field adjacent to the "Other" button. Failure to do
this will prevent connectivity to Cisco.com, and all
Cisco.com-related operations in this area will fail.
Table11-18 Edit Update Server Settings Dialog Box (Continued)
Element Description