Updating security content

Prev Next

Note

You can also manually update security content with DTI Update Portal. See the DTI Offline Update Portal User’s Guide for more information.

When you validate DTI access, the system checks for new security content. If new content is available, you can download the latest malware threat intelligence from the DTI cloud to the Network Security appliance.

For more information about validating DTI access, see Validating DTI access .

Prerequisites
  • Operator or Admin access

Updating security content using the Web UI

Use the Appliance Update page to update security content.

Prerequisites
  • Admin access

To update security content:
  1. On the About page, click Upgrade.

  2. Select DTI.

  3. Click the Action icon for Security Content and select Check.

    The appliance checks for updates, and if it finds them, automatically updates the security content.

Checking installed security content version using the CLI

Use the CLI commands in this topic to check your installed security content version.

To check installed security content version:
  1. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  2. Check the current security content status using the command below:

    hostname (config) # show fenet security-content status
  3. Check the Security Content Updates section in the DTI Security Content Status Information list, as shown in the example below:

    Security Content Updates
    Enabled		  : yes
    Update mode       : online
    Last Checked At	  : 2020/01/07 00:44:00
    Last Applied At   : 2020/01/06 23:45:19
    Last Applied Type : full
    Timestamp (UTC)	  : 2020-01-06 23:15:00
    Status		 : apply-info: No new security updates available
    Security Content Version: 976.292
To check the Security Content versions and date they were installed:
  1. Show log files containing security content information:

    hostname (config) # show log files all matching "security content version is"
  2. The output will look similar to the example below. You can see when a specific Security Content version was available by the earliest timestamp. The later timestamp shows when it was applied to your appliance.

    Searching log files...
    Mar  1 09:38:17 notifyd[18001]: [notifyd.NOTICE]-security content version is:249.101
    Mar  1 14:19:01 notifyd[12385]: [notifyd.NOTICE]-security content version is:249.101
    Mar 14 08:00:00 notifyd[4351]: [notifyd.NOTICE]-security content version is:252.101
    Mar 14 10:15:42 notifyd[10820]: [notifyd.NOTICE]-security content version is:252.101
Updating security content using the CLI

Use the CLI commands in this topic to update security content.

To update security content:
  1. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  2. Download the latest security-content package:

    hostname (config) # fenet security-content download-update
    Operation initiated in the background.
      Run 'show fenet security-content status [progress]' for status
  3. Install the security content:

    hostname (config) # fenet security-content apply-update
    Operation initiated in the background.
    Run 'show fenet security-content status [progress]' for status
  4. Review the download status:

    hostname (config) # show fenet security-content status
  5. Save your changes:

    hostname (config) # write memory