Managing Your Cisco Secure Virtual Appliance

IP Address

When the virtual appliance is first powered on, the Management port gets an IP address from your DHCP host. If the virtual appliance is unable to obtain an IP address from a DHCP server, it will use 192.168.42.42 as the Management interface’s IP address. The CLI displays the Management interface’s IP address when you run the System Setup Wizard on the virtual appliance.

The Virtual Appliance License


Note


You cannot open a Technical Support tunnel before installing the virtual appliance license. Information about Technical Support tunnels is in the User Guide for your AsyncOS release.


The Cisco Secure virtual appliance requires an additional license to run the virtual appliance on a host. You can use this license for multiple, cloned virtual appliances. Licenses are hypervisor-independent.

For AsyncOS for Web Security 8.5 and later, AsyncOS for Email Security 8.5.x and later, and AsyncOS for Security Management 8.4 and later:

  • Feature keys for individual features can have different expiration dates.

  • After the virtual appliance license expires, the appliance will continue to serve as a web proxy (Web Security appliance), deliver mail (Email Security appliance), or automatically handle quarantined messages (Security Management appliance) without security services for 180 days. Security services are not updated during this period. On the Cisco Secure Email and Web appliance, administrators and end users cannot manage quarantines, but the management appliance continues to accept quarantined messages from managed Cisco Secure Email Gateway Appliances, and scheduled deletion of quarantined messages will occur.

For AsyncOS for Email Security 8.0 and AsyncOS for Web Security 7.7.5 and 8.0:

  • Feature keys are included as part of the virtual appliance license. The feature keys expire at the same time as the license, even if the feature has not been activated. Purchasing new feature keys will require downloading and installing a new virtual appliance license file.

  • Because feature keys are included in the virtual appliance license, there are no evaluation licenses for AsyncOS features.


Note


For information about the impact of reverting the AsyncOS version, see the online help or user guide for your AsyncOS release.


Force Reset, Power Off, and Reset Options Are Not Fully Supported

The following actions are the equivalent of pulling the plug on a hardware appliance and are not supported, especially during AsyncOS startup:

— In KVM, the Force Reset option.

— In VMWare, the Power Off and Reset options.

CLI Commands on the Virtual Appliance

The Cisco Secure virtual appliances include updates to existing CLI commands and includes a virtual appliance-only command, loadlicense. The following CLI command changes have been made:

Command

Supported on Virtual SMA?

Information

loadlicense

Yes

This command allows you to install a license for your virtual appliance. You cannot run System Setup Wizard on the virtual appliance without installing a license using this command first.

etherconfig

The Pairing option is not included on virtual appliances.

version

This command will return all the information about the virtual appliance except for the UDI, RAID, and BMC information.

resetconfig

Running this command leaves the virtual appliance license and the feature keys on the appliance.

revert

Beginning with AsyncOS 8.5 for Email Security: Behavior is described in the System Administration chapter in the online help and user guide for your appliance.

reload

Running this command removes the virtual appliance license and all the feature keys on the appliance. This command is available only for the Web Security appliance.

diagnostic

The following diagnostic > raid submenu options will not return information:

1. Run disk verify

2. Monitor tasks in progress

3. Display disk verify verdict

This command is only available for the Email Security appliance.

showlicense

Yes

View license details.

For virtual Email and Web security appliances, additional information is available via the featurekey command.

SNMP on the Virtual Appliance

AsyncOS on virtual appliances will not report any hardware-related information and no hardware-related traps will be generated. The following information will be omitted from queries:

  • powerSupplyTable

  • temperatureTable

  • fanTable

  • raidEvents

  • raidTable