Cisco Ironport c160 licence upgrade

hi all,
What i need to do to upgrade expired license for ironport c160,
Where can I read about product number for this type of license?

Hi Mihail,
I am not sure if I understand the question.
If you have expired keys you should renew them. I would recommend contacting your Cisco Account Team and/or Reseller. If you are in process of renewing the keys, you could open a support ticket with our licensing team so they can evaluate the situation and assist you further.
You can find information about the keys your appliance has via Web UI and CLI.
In the Web UI, please go to:
System Administration > Feature Keys > Feature Keys.
Via CLI, please run:
> featurekey list
I hope this helps.
Regards,
Valter

Similar Messages

Ironport C160 Firmware upgrade issue

Hi All ,
i have C160 appliance when i tried to upgrade the OS with available it was failed . you can see the below captures .
Upgrades available.
1. AsyncOS 7.1.5 build 101 upgrade For Email, 2012-02-03
[1]> 1
Performing an upgrade may require a reboot of the system after the upgrade is
applied. You may log in again after this is done. Do you wish to proceed with
the upgrade? [Y]> y
IronPort Email Security Appliance(tm) Upgrade
Finding partitions... done.
Setting next boot partition to current partition as a precaution... done.
Erasing new boot partition... done.
Installing application... done.
Installing CASE... 35% 12:04 ETA./data/third_party/case/libexec/uridb-20110317_102448/uridb_1: Premature end of gzip compressed data: Input/output error
tar: Error exit delayed from previous errors.
The system upgrade failed due to a connection timeout. This could be the result
of a network interruption or a more serious error. If this problem persists,
please contact customer support.
(Machine mailrelay01.bahrainedb.com) [Disconnected]>
====================================================================== 192.168.111.4 ==========================
AsyncOS 7.1 for IronPort C160 build 020
Welcome to the IronPort C160 Messaging Gateway(tm) Appliance
(Machine mailrelay01.bahrainedb.com) [Disconnected]> upgrade
Would you like to save the current configuration to the configuration directory
before upgrading? [Y]>
Do you want to include passwords? Please be aware that a configuration without
passwords will fail when reloaded with loadconfig. [N]> y
Email a copy? [N]>
Upgrades available.
1. AsyncOS 7.1.5 build 101 upgrade For Email, 2012-02-03
[1]> 1
Performing an upgrade may require a reboot of the system after the upgrade is
applied. You may log in again after this is done. Do you wish to proceed with
the upgrade? [Y]> y
Removing stale lock file
IronPort Email Security Appliance(tm) Upgrade
Finding partitions... done.
Setting next boot partition to current partition as a precaution... done.
Erasing new boot partition... done.
Installing application... 87% 02:41 ETAdata/release/phoebe-7-1-5-101/lib/pycbox/ironport_debug.db: Premature end of gzip compressed data: Input/output error
tar: Error exit delayed from previous errors.
The system upgrade failed due to a connection timeout. This could be the result
of a network interruption or a more serious error. If this problem persists,
please contact customer support.
(Machine mailrelay01.bahrainedb.com) [Disconnected]>
(Machine mailrelay01.bahrainedb.com) [Disconnected]>
(Machine mailrelay01.bahrainedb.com) [Disconnected]>
Can you please advice

Asiam -
More than likely - there is something on the network that is distrupting the download and recompression of the upgrade package.
If you can - please contact the TAC, open a support case, and also open a tunnel for the appliance. If permissiable, just let us know if it is OK to attempt the upgrade while we are connected through tunnel as well.
Instructions on how to open remote access to ESA:
>techsupport tunnel cisco2013
## Please make sure you use the command above, from its CLI (command line interface), when opening the remote access.
Article #1541: What are Techsupport Tunnels? Link: http://tools.cisco.com/squish/b4b51
*** If you choose a different password, please notify me of the password you issued. ***
*** Also, please verify the S/N on the appliance the tunnel was initiated against. ***
You can either generate a support case directly from the appliance, or dial into the following:
Cisco Customer Interaction: 1-800-553-2447 / Outside US
-Robert

Cisco IronPort S360 WSA Upgrade

Hello!
I have IronPort S360 with very old FW: AsyncOS 7.1.1-027.
I decided to do automatic upgrade.
In available upgrades I see AsyncOS builds up to 7.5.2-303. In release notes for 7.5.2 I've read that upgrade from 7.1.1-027 is possible.
But before upgrade IronPort warn me about probable software incompatibility.
So the questions are: can incompatible FW be listed in available updates? Should I previously check what version is the latest compatible with S360 or I can simply install the latest from available? Is there could be any problems with licensing after upgrade from such an old FW?
Thanks in advance.

Just to confirm, FW you mean firmware?
All software/firmware shown in the upgrade list is compatiable. There is no "uncompatabile" software for a WSA that is released. All released versions work on all WSA platforms.
In regards to licensing there should be no licensing issues.
7.5.2-303 is a very good release to upgrade to. Depending on your feature needs, you might also look into the 7.7 train, or the recently released 8.0 code trains. Many new features are in both, and many issues are fixed in each.

Unable to boot Cisco Ironport C160, beeps and flashing amber light

At first RAID staus was showing as degraded. I tried to rebuild the RAID but hat failed. I was able to logon and update to version 8.0 after the RAID rebuild failed.
Now when I try to boot the ironport it beeps twice and keeps on repeating every 10 seconds or so, and there is also a flashing amber light at the back and front of the device.
Suspecting that there was a problem with the hard drives i tried to restore a recent image of the Ironport that I had, hoping that the RAID would rebuild, But that is not the case. The Ironport is still unable to boot and is beeping twice as well as the flashing amber light.
Does anyone know if there is anyhting that I can do to rectify this problem?
Thanks in advance

Amber light usually means hardware issue. You should contact TAC.
It is not clear what you did to rebuild the RAID but you should try nothing before discussing with TAC. Any attempt to do reimage could break the box for good.
At the moment you have access to the box, enable remote access and call TAC.
There is an account, named enablediag which can be used for troubleshooting. It has the option to open remote access so TAC can assist further. The password is the same as your admin account.
I hope this helps.
-Valter

What is the latest available AsyncOS Version for the IronPort C160

Hello @ all,
i try to figure out if there is a AsyncOS 8.x update for the Cisco IronPort C160 available.
My Cisco C160 cluster is running the 7.6.0-357 AsyncOS version.
Greetings Robert

8.0.1-023 is still the latest GA release. If you are on that release, you won't see any of the FCS releases.
Q: Are there any other releases available for AsyncOS?
A: Yes, FCS candidates are available for provisioning, but you must open a support case and request to be added to the FCS provisioning group. Please see our other CSC blog posts for recent FCS release information.
I'll shoot you a DM and work with you to get your SN and info, if you are wanting to get 8.5.6-073?
I hope this helps!
-Robert
(*If you have received the answer to your original question, and found this helpful/correct - please mark the question as answered, and be sure to leave a rating to reflect!)

Cisco IronPort AsyncOS 6.7.6-068 for Management GA Notification

Cisco is pleased to announce the General Availability (GA) of a new major release of AsyncOS 6.7.6-068 for
Management to all customers. This release applies to all our Security Management Appliances (M-Series).
AsyncOS 6.7.6-068 for Management enables Centralized Tracking and Reporting for the new features introduced in AsyncOS 7.0 for Email.
New Features and Enhancements in AsyncOS 6.7.6-068 for Management
New Feature: Centralized support for the reporting and tracking changes in the AsyncOS for Email release 7.0:
RSA Data Loss Prevention
Marketing Message Detection
New Feature: Reporting by ESA Groups
Enhanced: Domain-Based Executive Summary Report now configurable by:
Domain of Email Server
Domain of Email Address
Fixes in AsyncOS 6.7.6-068 for Management
Fixed: MemoryError after losing Housekeeper thread [Defect ID: 52048]
Fixed: The Show Details link results in a timeout [Defect ID: 51558]
Fixed: Safelist/Blocklist should be exportable via CLI [Defect ID: 43360]
Fixed: LDAP Query strips spaces [Defect ID: 46099]
Fixed: Tracking database time does not update after system timezone is changed [Defect ID: 49407]
Fixed: Application error when accessing Online Help from the End User Spam Quarantine page [Defect ID: 52395]
This release has gone through our beta program, internal soak tests and is also running in production at our FCS customers.
Please upgrade at your convenience and let us know how you like this new release!
Cheers,
Jakob

Hi,
We identified an issue in AsyncOS 6.7.6-068 for Management that under certain circumstances can cause loss of historical reporting data when reporting groups are configured. To ensure a high quality release, further testing on our side is required.
6.7.6-068 is no longer available for upgrade to your M-Series appliances.
If you already upgraded to 6.7.6-068 we strongly recommend to disable group based reporting to avoid being affected.
We expect to release a new improved build of 6.7.6 shortly and apologize for any inconvenience or confusion this might have caused.
If you are required to upgrade to 6.7.6 before a new build is available, please contact Cisco IronPort Customer Support.
I'll let you know once the new build is available...
Best Regards,
Jakob

Ironport C160 Device Troubleshooting

My apologies if I am posting this in the wrong place but there does not appear to be a place for Ironport devices.
We have two Ironport C160 appliances configured as a cluster that have been running without issue for several months. In the past month and a bit one of the units has hung/failed/become unresponsive. I'm wondering if there is a standard process people who support these devices follow to troubleshoot problems like this? I couldn't find anything of much use in the documentation I have available so any advice relating to what I should be checking would be appreciated. Are there log files to look at? Is there anything I can do other than a hard reset to get this machine back and once its back is there something I should be doing to make sure its working properly?
Any assistance or direction you can provide would be great.
Thanks

Mitch,
it looks like your user account only has guest level access, while you need customer level access. I can only suggest to follow the FAQ's recommendation:
If you are a Cisco IronPort customer and facing issues accessing these
communities, please contact Cisco IronPort Customer support for
assistance. The contact information can be found here: Cisco IronPort Support Contacts
hth
Herbert

Configuring Listener on IronPort C160

Hi,
We are currently in the process of configuring IronPort C160 system. The email appliance is going to be set up in the DMZ. We already have a listener for Incoming Mail and has the IP address in the DMZ network. We have also configured SMTP routes fto accept mails for our domains(Receiving domains) and forward it. However, I am not sure do we need a listerner for the outbound mail. Also we have routes for incoming mail that specify the destination host. Do we need to have something for emails going outbound ?
can somebody please help?

Hi,
So I am not sure if I am following all of your throught process here as there are several questions.
As far as do you need an outbound listener? Multiple listeners (inbound and outbound) are not required but in some cases they make sense. WIth a DMZ configuration it may make sense to do this depending on your network layout. Based on some of the other statements and comments in your post I would think you probably would want a seperate listener for inbound and outbound.
I may need some clarification on your network configuation to give you an accurate answer on the remaining questions. For outbound you can utilize smtproutes if you want to force traffic to a speicifc host or IP ( bypass DNS). Typically outbound traffic is routed through the relaylist sendergroup in the HAT from there the appliance simply looks up the recipient domain via DNS to get the MX record for recipient domain. If you need to relay to another host prior to sending the messages out to the rest of the world then you would probably want to set up an smtproute to point to that host.
It may be easier to not think of the appliance as having inbound or outbound. In reality the appliance does not really know or care about inbound or outbound it simply processes the messages and routes them based on DNS or specified routes through something like smtproutes.
Not sure I fully answered your question , but hopefully that helped a bit. If you can provide a bit more detail I think I can help clarify things for you.
Christopher C Smith
CSE
Cisco IronPort Customer Support

Cisco Ironport failover

Hi all
Can someone please assist me im trying to setup two Cisco Ironport WSA devices to failover for each other, what would i require for this to happen.
With Thanks
Kuda

Hi Vince
Yes, i had that issue using pac files and IE9.
i opened a case with Microsoft Tech support, and after 2 months, they said that there is an IE9 bug, and will be considered on new patch releases. (it was 6 months ago, and i think is not a patch available yet...)
The Microsoft solution was use IE8 (failover works as expected)...and don't upgrade to IE9...
i didn't test it on IE10, i think the issue is the same as IE9, but you should test it with all the patches up to date.

Cisco Registered Envelope Service Upgrade coming November 5th, 2011

Cisco Systems is pleased to announce a major upgrade of the Cisco Registered Envelope Service (CRES) scheduled for Saturday, November 5th, 2011 from 18:00 – 00:00 PST (Sunday, November 6th 02:00:00 – 08:00:00 UTC).
During the maintenance window it will not be possible to open PXE encrypted messages. CRES admins will not be able to log into the administration interface and senders of PXE encrypted messages may receive bounce messages. All services will be restored once the upgrade is concluded. Any bounced messages can be resent at that time.
This upgrade contains a variety of features and fixes:
SAML Authentication
SAML is an XML-based standard primarily used for Single Sign-On (SSO), a simpler way for end-users to authenticate with multiple web services such as CRES. Currently only SAML 2.0 is supported.
Single Sign-On means users log in once to authenticate (with an Identity Provider) and thereafter use a range of services from Service Providers without having to log in again. The protocol also supports Single Log-Out
This simplifies the user experience, and improves security because the user no longer has to remember login details for multiple services. CRES support for SAML works for new and existing CRES envelopes. SAML authentication must be enabled individually for each corporate account. After this is done, all users in that account must authenticate with SAML. Any users not owned by the account will continue to use CRES authentication.
Email Address Book
An address book has been added to CRES 4.0 user accounts to allow you to store and easily access frequently-used addresses. Now, when you compose an email, you can select from the addresses stored in your address book.
Partial list of resolved issues
Fixed: Cannot Open Certain Envelopes on IE7
Fixed: Envelope Opener does not clean up Sessions if Interrupted by Application Restart
Fixed: The CRES Server does not Have the Class 3 Valicert Certificate Installed
Fixed: Security Problem When Changing WebSafe password using Forgot Password Link
Fixed: Remembering Passwords in Certain Environments Sometimes Fails
Fixed: Reassigning User Does Not Work in the Administrator GUI
Fixed: Changes to Customizable Buttons Sometimes Fail
Fixed: UTF-8 characters in Email Address not Preserved During Secure Forward or Secure Reply
Thank you for choosing Cisco IronPort Security Products.
Best Regards,
Cisco IronPort Customer Support

UPDATE: Some issues were encountered during the deployment phase of CRES 4.0. These issues required us to perform a rollback to the previous version. Currently this upgrade is scheduled to take place Saturday November 12th.
Christopher C Smith
CSE CSCM
CISCO IronPort Customer Support

Cisco Ironport Certificate ISsue

Hai All,
We have cisco ironport WSA 370 version 7.5 .
We need to decrypt some https traffic . But the issue is our corporate AD support only 2048 bit cert. But our WSA box only support 1024.
Heared that asycos 7.7 (new release) support 2048 bit cert. When i check the 7.7 guide, its not mentioned. Can you please suggest???

Hi Mohamed,
There is a feature request so the WSA can generate 2048 bit certificate; but you can upload a an Intermediate root signing certificate to the appliance.
Look for "Uploading a Root Certificate and Key"
https://www.cisco.com/en/US/docs/security/wsa/wsa7.7/User_Guide/WSA_7.7.0_UserGuide.pdf
HTH,
Luis Silva
"If you need PDI (Planning, Design, Implement) assistance feel free to reach"
http://www.cisco.com/web/partners/tools/pdihd.html

Anyone try 8.5.6-074 on an IronPort C160 (is it possible, does it run ok?)

We have the C160 (also have an S160 but I will just discuss the C160 in this thread). Since its no longer sold, I was wondering if it still has the power to run the new 8.5.6-074 that went GA. I do not see it as an available upgrade, however I am on 7.6.0-444. I see I can upgrade to 7.6.2-014. After making that upgrade, I suspect I will be given a choice to upgrade to 7.6.3-019? Then after that sucessfull upgrade, I should see 8.5.6-074 as an available upgrade, correct?
We are most interested in the URL filtering feature. We've seen an uptick in spam lately where there are URL's in the e-mail. Any way we can filter the messages to redirect or eliminate bad URL's would be great. People have been good to delete them, and we have had security training. Plus with our IDS, Anti-Virus, and also the S160 web filtering, we would hope that any malicious URL's would be blocked (but I'm not going to try!)
I would be grateful to hear from people with older C160 email security appliances running the new code. Curious how your upgrade went and if everything is chugging along smoothly.
Thanks!

Yes - the C160 will upgrade and run 8.5.6. Your hops would be:
phoebe-7-6-0-444 --> phoebe-7-6-2-014 --> phoebe-8-0-1-023 --> phoebe-8-5-6-074
You would need to upgrade through the listed hops in order to see the next hop.
(*Only the CX50 appliances cannot upgrade past the 7.6 AsyncOS family.)
-Robert

Ironport C160-Best practice config for my 2 listeners?

I am trialling an Ironport C160.
I want it to scan inbound and outbound mail. I have configured a public inbound listener for mail from the internet. It is configured to accept all my domains, and forward them to my exchange server. It does LDAP lookups for recpients to ensure they are valid. It uses the Data1 interface on the ip address of the Ironport and also has the hostname ironport.mydomain.com.
What is the recommended way to configure the private outbound listener? I just want it to do simple av scanning, then pass it on to my ASA.
Should I configure a new interface o Data2, and use port 25? If so, what would the hostname be?
Or use the same interface and use port 24 instead?
What are the pros and cons of each setup?

Please note that you can add your Exchange server IP address into RELAYLIST or any sender group with RELAYED mail flow policy or mail flow policy with 'Relay' connection behavior. Add IronPort listener iP as smart host on Exchange server. All emails from Exchange server will then be treated as outgoing emails and envelope recipient address will not be checked against LDAP.
Most of my customers simply use one listener for both incoming and outgoing emails. You can choose to have multiple listeners for incoming (e.g. Different domains want to have their own MX IP addresses, sender groups for whitelist, greylist, blacklist domain/IP ranges) and outgoing emails (e.g. Not adding 'Received' header for outgoing listener for security reason).
Please note that there is a restriction that you cannot configure IP addresses on same network range on different physical interfaces on IronPort.
You can also configure multiple IP interfaces or interface groups on IronPort such that you can deliver emails for different domains, normal or urgent, management or marketing or other emails by different IP addresses or IP range.

Cisco ironport 370 to 670 Configuration Compatibility Issue

I have currently Cisco IronPort S360 and want to Upgade with Cisco S670, upload configuration file of Cisco ironport 360 in &760 but unable to succeed.becasue of compatibility issue of OS .any one can help me regarding how to compatible .
Regards,
Shafiq

Hi Shafiq,
Please open a ticket and send both of your configuration files with the ticket. The CSE will need to verify that the network interfaces are the same or modify your xml file to allow it to be successfully uploaded to the new 670.
Sincerely,
Erik Kaiser
WSA CSE
WSA Cisco Forums Moderator

Mac OS X Leopard Server 10.5 - Licence Upgrade (10 Client - Unlim Client)

Hi.
I've bought the Mac OS X Leopard Server 10.5 - Licence Upgrade (10 Client - Unlim Client). But now I realize that I own only the Mac OS X Server Version 10.4. And I do need only the 10 User-Licence.
Is it possible to install just a 10 Client-Version from this Edition? Or do I have to get a new Version?
Bye,
Nico

Let me get this clear: you have a copy of Mac OS X 10.4 Server, and bought a 10 user to unlimited user upgrade of Mac OS X 10.5. Is that correct? If it is, then sorry, but you cannot use the 10.5 license upgrade; it's not valid with 10.4 Server (the serial number format is different between 10.4 and 10.5). The 10.5 license upgrade is only usable with a copy of Mac OS X 10.5 10-user edition. So you'll have to purchase a copy of 10.5 10-user, or (if possible) just return the license upgrade and purchase a copy of 10.5 Server Unlimited Users.
If I've misunderstood, please post back and clarify what it is you have and want to accomplish.

Cisco Ironport c160 licence upgrade

Similar Messages

Maybe you are looking for