Use the commands in this topic to configure the managed appliances currently being managed by the Central Management System to use a cache proxy. You must perform this configuration using the CLI on the managing Central Management System. The managed appliance DTI source must be mapped to a cache proxy for software updates. You can configure only one cache proxy for each data center.
Configuring the profile for the managed appliances
Enable the CLI configuration mode.
cm-hostname > enable cm-hostname # configure terminal
Prevent the Central Management System from changing the managed applianceʼs DTI source server address, port, user name, and password.
cm-hostname (config) # cmc profile profile_name command sequence_number "no fenet dti source override enable"Specify the custom address for the cache proxy that will be used by the managed appliance.
cm-hostname (config) # cmc profile profile_name command sequence_number "fenet dti source type CUSTOM address address port port"where:
address is the IP address of the cache proxy.
port is the source HTTPS port (433 by default).
Specify the custom user name and password to authenticate access for the managed appliance to use the cache proxy.
cm-hostname (config) # cmc profile profile_name command sequence_number "fenet dti source type CUSTOM username CMS username password CMS password"Specify the custom DTI download server for this appliance.
cm-hostname (config) # cmc profile profile_name command sequence_number "fenet dti source default CUSTOM"Verify the custom configuration settings for the cache proxy for the managed appliance.
cm-hostname (config) # cmc profile profile_name command sequence_number "show fenet dti configuration"Verify the profile that is configured for the managed appliances.
cm-hostname (config) # show cmc profilesRepeat this procedure for each data center.
Example
The following example shows how to configure the profile for the managed appliances to use a local cache proxy:
cm-hostname (config) # cmc profile Profile1 command 1 "no fenet dti source override enable"cm-hostname (config) # cmc profile Profile1 command 2 "fenet dti source type CUSTOM address 172.16.127.238 port 443"cm-hostname (config) # cmc profile Profile1 command 3 "fenet dti source type CUSTOM username CMS username password CMS password"cm-hostname (config) # cmc profile Profile1 command 4 "fenet dti source default CUSTOM"cm-hostname (config) # cmc profile Profile1 command 5 "show fenet dti configuration"Creating a group for the managed appliances
You must create one group for each data center.
Enable the CLI configuration mode.
cm-hostname > enable cm-hostname # configure terminal
Add the appliance to the new or existing group.
cm-hostname (config) # cmc group group name appliance appliance nape
Applying the profiles to the appliance group
You must apply the appropriate profile to each appliance group. The profiles must be applied for each data center.
Enable the CLI configuration mode.
cm-hostname > enable cm-hostname # configure terminal
Apply appliance profile to the group for each data center.
cm-hostname (config) # cmc profile profile name apply group group nameRepeat this procedure for each data center.
Example
The following example shows how to apply the profiles to the appliance group:
cm-hostname (config) # cmc profile profile1 apply group group1DTI CLIENT CONFIGURATIONS:
ACTIVE SETTINGS:
Mode : online
Download source : CUSTOM (CMSuser@172.16.127.238) - Managed by Appliance
Upload destination : CMS (CMSuser@172.16.127.214) - Managed by CMS
Mil service : CMS (CMSuser@172.16.127.214) - Managed by CMS
AVAILABLE OPTIONS:
--------------------------------------------------------
Download User Address
--------------------------------------------------------
CDN CMSuser cloud.fireeye.com
CMS CMSuser 172.16.127.214
CUSTOM CMSuser 172.16.127.238
DTI CMSuser staticcloud.fireeye.com
--------------------------------------------------------
Upload User Address
--------------------------------------------------------
CMS CMSuser 172.16.127.214
DTI CMSuser up-staticcloud.fireeye.com
--------------------------------------------------------
MIL User Address
--------------------------------------------------------
CMS CMSuser 172.16.127.214
DTI CMSuser mil-staticcloud.fireeye.com