Managed Email Security - Server appliances can communicate with the Central Management System appliance over a single port or using two ports. (For details, see About changing the address type for DTI network service requests .)
In the dual-port configuration, if the Central Management System appliance is in an internal network behind a NAT gateway, a custom DTI source address must be configured. The custom address allows the managed appliance to access the HTTPS port on the Central Management System appliance to request software updates from the DTI network. (For details, see Configuring and activating an accessible DTI server address .)
To configure the custom address, you must set a flag to prevent the Central Management System appliance from overriding the custom address settings. If you switch from dual-port to single-port communication, you must remove this flag so the Central Management System appliance can push the single-port settings to the Email Security - Server appliance.
Log in to the Email Security - Server CLI.
Go to CLI configuration mode.
appl-hostname > enable appl-hostname # configure terminal
Allow the Central Management System appliance to push the single-port settings:
appl-hostname (config) # fenet dti source override enable appl-hostname (config) # fenet dti upload destination override enable appl-hostname (config) # fenet dti mil service override enable appl-hostname (config) # fenet dti faude service override enable appl-hostname (config) # fenet dti avsuite service override enable
Verify your changes:
appl-hostname (config) # show fenet
Save your changes.
appl-hostname (config) # write memory
Perform the procedure in Configuring dual-port Communication using the CLI .
If the Central Management System appliance is behind a NAT gateway, perform the procedure in Configuring and activating an accessible DTI server address using the CLI .
Example
The following example allows the Central Management System appliance to push the single-port settings to the Email Security - Server appliance, after the address type was changed from dual-port to single-port.
appl-hostname (config) # fenet dti source override enable appl-hostname (config) # fenet dti upload destination override enable appl-hostname (config) # fenet dti mil service override enable appl-hostname (config) # fenet dti faude service override enable appl-hostname (config) # fenet dti avsuite service override enable appl-hostname (config) # write memory appl-hostname (config) # show fenet dti configuration DTI CLIENT CONFIGURATION: Download source : CMS (DTIUser@10.2.0.0 : singleport) - Managed by CMS Upload destination : CMS (DTIUser@10.2.0.0 : singleport) - Managed by CMS Mil service : CMS (DTIUser@10.2.0.0 : singleport) - Managed by CMS ...
Faude service : CMS (DTIUser@10.2.0.0 : singleport) - Managed by CMS
AVSuite service : CMS (DTIUser@10.2.0.0 : singleport) - Managed by CMS