You can configure auto-mounting on a USB device attached to the Network Security appliance. Only one USB device can be mounted at a time. You can configure HTTP access to install system images, guest images, or security content from the USB device onto the appliance.
Note
You can configure auto-mounting on a USB device only using the CLI.
Prerequisites
Admin access
Enabling or disabling auto-mounting on a USB device using the CLI
Use the commands in this topic to enable or disable auto-mounting on a USB device attached to the Network Security appliance. You must enable auto-mounting when the USB device is attached. By default, auto-mounting is disabled. Auto-mounting will not mount the USB device when it is already attached to the appliance.
Prerequisites
Admin access
To enable auto-mounting on a USB device:
Go to CLI configuration mode:
hostname > enablehostname # configure terminalEnable auto-mounting on a USB device attached to the appliance:
hostname (config) # media usb auto-mount enablePlug the USB device in to the appliance immediately.
Verify the USB device auto-mount configuration.
hostname (config) # show media usb USB auto-mount configuration: Enabled: yes Local web access: yes Top-level directory: fireeye
To disable auto-mounting on the USB device:
Go to CLI configuration mode:
hostname > enablehostname # configure terminalDisable auto-mounting on the USB device:
hostname (config) # no media usb auto-mount enableVerify the USB device auto-mount configuration.
hostname (config) # show media usb USB auto-mount configuration: Enabled: no Local web access: yes Top-level directory: fireeye
Configuring HTTP access to install software updates using the CLI
Use the commands in this topic to configure HTTP access to install software updates from a USB device onto the appliance. By default, you can access only the contents locally in the fireeye directory for the first partition from a specified URL.
Prerequisites
Admin access
Enable auto-mounting on the USB device to the attached appliance. For details about how to enable auto-mounting, see Enabling or disabling auto-mounting on a USB device using the CLI .
To configure HTTP access to install software updates from a USB device:
Go to CLI configuration mode:
hostname > enablehostname # configure terminalEnable HTTP access on the loopback interface on the appliance:
hostname (config) # media usb web-access enable localLocal web access is enabled by default.
Specify the top-level directory as the location to extract software updates on a USB device:
hostname (config) # media usb web-access top-dir fireeyeThis directory will be used as the URL to extract the software on the USB device. For example, if you specified the install directory as
fireeye/gi-13.0701, the URL for the installation ishttp://localhost/media/usb1/fireeye/gi-13.0701.Verify that the USB device is mounted:
hostname (config) # show media usb USB auto-mount configuration: Enabled: yes Local web access: yes Top-level directory: fireeye USB auto-mount status: Device mounted: yes Access URL: N/ADownload software updates using the specified URL as the location to install the updates. See Installing guest images from a USB device using the CLI for a representative procedure.
Installing guest images from a USB device using the CLI
Use the commands in this topic to install guest images from a USB device onto the appliance. By default, you can access only the contents locally in the fireeye directory for the first partition from a specified URL.
Note
The Central Management System appliance does not host guest images when it is operating in "inline" mode.
Prerequisites
Admin access
Enable auto-mounting on the USB device to the attached appliance. For details about how to enable auto-mounting, see Enabling or disabling auto-mounting on a USB device using the CLI .
Configure HTTP access. For details, see Configuring HTTP access to install software updates using the CLI.
Complete the steps in the following order to set up the files correctly to install guest images from a USB device:
Download the guest images tar file from the Trellix network.
Extract the contents on the USB device.
Remove the version numbers. Copy the following file names:
server-manifest.VERSIONtoserver-manifestserver-manifest.VERSION.md5toserver-manifest.md5server-manifest.VERSION.v2toserver-manifest.v2server-manifest.VERSION.v2.md5toserver-manifest.v2.md5
To download guest images from a USB device:
Download guest images using the specified URL as the location to install the guest images:
hostname (config) # guest-images download url <URL>where
URLis the location that you specified as the top-level directory for the installation.Wait for the appliance to fully download the guest images before beginning any installations.
Verify the download progress:
hostname (config) # show guest-images downloadAfter the download is complete, install the guest images:
hostname (config) # guest-images installVerify that guest images are properly installed:
hostname (config) # show guest-images
Mounting or unmounting a USB device using the CLI
Use the commands in this topic to manually mount or unmount a USB device to the attached appliance. Trellix recommends that you physically remove the USB device from the port. Use the media usb mount command before you attach the drive, and use the media usb eject command after you unplug it.
Note
The
media usb ejectcommand will have no effect if the USB device is not mounted.
Prerequisites
Admin access
To mount a USB device:
Go to CLI configuration mode:
hostname > enable hostname # configure terminalMount the USB device to the attached appliance:
hostname (config) # media usb mount
To unmount a USB device:
Go to CLI configuration mode:
hostname > enable hostname # configure terminalUnmount the USB device from the attached appliance:
hostname (config) # media usb eject