Secure Virtual Appliance
“
Specifications
- Product: Cisco Secure Virtual Appliance
- License: Required for operation on a host
- Supported Services: Security services for 180
days - CLI Commands: loadlicense, showlicense
supported - SNMP: No hardware-related information
reported
Product Usage Instructions
1. IP Address Configuration
Upon initial power-up, the Management port acquires an IP
address from DHCP. If DHCP fails, the default IP address is
192.168.42.42.
2. Virtual Appliance License
An additional license is required to operate the virtual
appliance on a host. The license is hypervisor-independent and can
be used for multiple cloned virtual appliances.
3. CLI Commands
The virtual appliance supports CLI commands such as loadlicense
and showlicense. Other commands are not fully supported or are
specific to hardware appliances.
4. SNMP Configuration
SNMP on the virtual appliance does not provide hardware-related
information or traps. Queries related to hardware may not return
expected results.
Frequently Asked Questions (FAQ)
Q: Can I manage quarantines on the Cisco Secure Web virtual
appliance?
A: During the initial 180-day period after obtaining the
license, security services are not updated, and administrators and
end users cannot manage quarantines on the Web appliance. Scheduled
deletion of quarantined messages will occur automatically.
Q: What actions are not supported and may impact the virtual
appliance?
A: Force Reset in KVM, Power Off, and Reset options in VMWare
are equivalent to pulling the plug on a hardware appliance and are
not recommended during AsyncOS startup.
“`
Managing Your Cisco Secure Virtual Appliance
· IP Address, on page 1 · The Virtual Appliance License, on page 1 · Force Reset, Power Off, and Reset Options Are Not Fully Supported, on page 2 · CLI Commands on the Virtual Appliance, on page 2 · SNMP on the Virtual Appliance, on page 2
IP Address
When the virtual appliance is first powered on, the Management port gets an IP address from your DHCP host. If the virtual appliance is unable to obtain an IP address from a DHCP server, it will use 192.168.42.42 as the Management interface’s IP address. The CLI displays the Management interface’s IP address when you run the System Setup Wizard on the virtual appliance.
The Virtual Appliance License
Note You cannot open a Technical Support tunnel before installing the virtual appliance license. Information about Technical Support tunnels is in the User Guide for your AsyncOS release.
The Cisco Secure virtual appliance requires an additional license to run the virtual appliance on a host. You can use this license for multiple, cloned virtual appliances. Licenses are hypervisor-independent. For AsyncOS for Web Security 8.5 and later:
· Feature keys for individual features can have different expiration dates. · After the virtual appliance license expires, the appliance will continue to serve as a web proxy without
security services for 180 days. Security services are not updated during this period. On the Cisco Secure Web appliance, administrators and end users cannot manage quarantines and scheduled deletion of quarantined messages will occur.
Managing Your Cisco Secure Virtual Appliance 1
Force Reset, Power Off, and Reset Options Are Not Fully Supported
Managing Your Cisco Secure Virtual Appliance
Note For information about the impact of reverting the AsyncOS version, see the online help or user guide for your AsyncOS release.
Related Topics: · Install the Virtual Appliance License File
Force Reset, Power Off, and Reset Options Are Not Fully Supported
The following actions are the equivalent of pulling the plug on a hardware appliance and are not supported, especially during AsyncOS startup: — In KVM, the Force Reset option. — In VMWare, the Power Off and Reset options.
CLI Commands on the Virtual Appliance
The Cisco Secure Web virtual appliances include updates to existing CLI commands and includes a virtual appliance-only command, loadlicense. The following CLI command changes have been made:
Command
Supported on Virtual SMA?
loadlicense
Yes
etherconfig
—
version
—
resetconfig
—
revert
—
reload
—
diagnostic
—
showlicense
Yes
SNMP on the Virtual Appliance
AsyncOS on virtual appliances will not report any hardware-related information and no hardware-related traps will be generated. The following information will be omitted from queries:
· powerSupplyTable
Managing Your Cisco Secure Virtual Appliance 2
Managing Your Cisco Secure Virtual Appliance
· temperatureTable · fanTable · raidEvents · raidTable
SNMP on the Virtual Appliance
Managing Your Cisco Secure Virtual Appliance 3
SNMP on the Virtual Appliance
Managing Your Cisco Secure Virtual Appliance
Managing Your Cisco Secure Virtual Appliance 4
Documents / Resources
 |
CISCO Secure Virtual Appliance [pdf] User Guide Secure Virtual Appliance, Virtual Appliance, Appliance |