ACTIVE UPDATE

The Active Update module consists of a single screen with three separate sections:

  • Update: for each module, makes it possible to select whether the update must be manual, automatic or disabled.
  • Manual update for security databases: makes it possible to set manual updates for the configured modules. These modules are updated via an update file downloaded from the MyStormshield website.
  • Server configuration: makes it possible to configure custom servers for automatic updates other than custom context-based protection signatures and custom web services.
  • Custom server configuration: makes it possible to configure custom servers for the automatic updates of custom context-based protection signatures and custom web services.

Update

Status 

Double-click to select the update type for a module. Three choices are possible:

  • Disabled,
  • Manual (using the update file downloaded from MyStormshield),
  • Automatic.
Module Type of data updated (the list varies according to the license purchased).

Manual update for security databases

To update data configured for manual updates:

  1. Download the update file (with .ssp extension) from MyStormshield (Downloads > Stormshield Network Security > Offline Active Update Data).
  2. Select the file and click on Update.
    The file contains all data that can be updated via Active Update, but only data configured for manual updates will be included.

With the Go to system monitoring link, you can access the Monitoring > Monitoring > System module, to see the update status and the date on which the modules were last updated.

Server configuration

Update servers

Stormshield Network update servers are entered by default, but you can customize these addresses to set up internal mirror sites. For further information, refer to the article in the Stormshield Knowledge base How to create my own autoupdate server for my Stormshield UTMs.

Custom server configuration

Web services tab

To automatically update the list of your custom web services hosted on one or several internal servers, enter details of these servers in this grid.

To add a server:

  1. Click on Add,
  2. Enter the Database name of the custom web services hosted on the server.
    This name must be unique.
  3. Select the Source URL (server) from which the database will be downloaded.
  4. If necessary, specify the Certification authority that signed this server's certificate to verify the validity of this certificate.
  5. Select the frequency of database updates. This may be:
    • 30 minutes,
    • 12 hours,
    • Daily (suggested by default),
    • Weekly,
    • Monthly.
  6. If the server requires authentication, select the HTTP authentication checkbox, and enter the ID and Password.
  7. Confirm the creation of the server by clicking on Apply.
  8. Confirm the Active Update configuration by clicking on Apply.

Contextual protection signatures tab

To automatically update your custom contextual protection signatures hosted on one or several internal servers, enter details of these servers in this grid.

To add a server:

  1. Click on Add,
  2. Enter the URL from which the database will be downloaded.
  3. Specify the Certification authority that signed this server's certificate to verify the validity of this certificate.
  4. Confirm the creation of the server by clicking on Apply.
  5. Confirm the Active Update configuration by clicking on Apply.