has anyone have much success with the "auto-update" feature in Cisco Pix 
Firewall?  From what I've read, this feature allows the firewall
to automatically retrieve the latest code and configuration from the
"auto-update" server.  However, I am having trouble to get it work.

Here is what I put on the Pix firewall config:

auto-update device-id hardware-serial
auto-update poll-period 1 5 1
auto-update server https://199.0.216.222/pix622.bin

The "auto-update" server is a Solaris running Apache to serve http and
https connection.

The problem is that I can see the pix firewall trying to connect to
the "auto-update" server but I am not seeing it downloading anything
from the "auto-update" server.  The pix is running version 6.2(1) and
I have an image onthe "auto-update" server that is pix622.bin.
I reboot the pix several times but I still have version 6.2(1).

Now if I decide to this mannually then it works:
pix# copy https://199.0.216.222/pix622.bin flash
copying https://199.0.216.222/pix622.bin to flash:image
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Received 1658880 bytes
Erasing current image
Writing 1540152 bytes of image
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Image installed
pix# wr t

After that, I reboot the firewall and it comes up with version 6.2(2).
However, because this requires human intervention, it defeats the
purpose of "auto-update".

I have to manage 50 Pix firewalls and I would like to use this
"auto-update" feature to automatically upgrade the code image and
configuration.

Anyone has success with this feature, please let me know.  Thanks.





_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=50003&t=50003
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to