HP VPN Firewall Appliances Attack Protection Configuration Guide

131
Hardware Si
g
nature u
pg
rade com
p
atibilit
y
F1000-S-EI No
F100-C-G/F100-S-G Yes
F100-M-G/F100-A-G/F100-E-G Yes
F5000-A5 No
F5000-S/F5000-C No
Firewall modules No
U200-A/U200-M/U200-CA Yes
U200-S/U200-CS/U200-CM Yes
Overview
Signature databases define which signatures the device can recognize. For example, they recognize the
attack signatures and virus signatures. You must upgrade them promptly to ensure security.
Use the following methods to upgrade signature databases:
• Auto upgrade—Online upgrade mode. In this mode, the device periodically gets the most current
signature database file from a specific signature database server to upgrade the local database.
• Manual upgrade—Online upgrade mode. In this mode, you can get the most current signature
database file from a specific signature database server and upgrade the local database by a single
click.
• Local upgrade—Offline upgrade mode. You can get a signature database file in offline mode, save
the file to the local host, and import the file to the device to upgrade the signature database with the
file. Local upgrade is usually used in a LAN and it allows you to use any signature database version
that is compatible with the device.
Upgrading the signature database
Follow these guidelines when you upgrade the signature database:
• To upgrade signature database file online, you must first navigate to page Network > DNS >
Dynamic to configure the DNS server (see Access Control Configuration Guide).
• For successful signature database upgrade, make sure the current license file is valid and not
expired, the new signature database version is compatible with the device's software version, and
you perform no other operations during the upgrade.
• If you upgrade the software to a version that contains a new feature and the new feature requires
the cooperation of a certain signature database version, you must also upgrade the signature
database to the required version.
To upgrade the signature database, select Advanced Security Prevention > Signature Upgrade from the
navigation tree. The signature upgrade page appears.