cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Web Gateway: Offline Updates for Environments with no Internet Access

Introduction

McAfee Web Gateway offers support for offline updates which allow the administrator to create, download, and apply full update packages (vs. incremental updates) that can be applied manually with the use of portable media.

This can be very useful for appliances that are part of closed/isolated network which aren't able to connect to the normal McAfee update servers, or for customers that would like to test the use of an update before applying it.

These updates apply to the Antimalware engine, URL filter, Data Loss Prevention, Dynamic Content Classification, Application Control, Single Sign On services, and 3rd party Avira Antivirus.  This process does not update the McAfee Web Gateway version itself.

 

Considerations

As offline update packages are version and build specific, be sure to verify this information prior to building the package. Failure to do so will result in a coordinator error message, wasted time, and the user needing to generate the update package again with the correct version and build numbers.

 

You must have an active licensed product in order to generate and apply offline updates.

 

Though update packages are version and build specific you always have the option of reverting back to a previous update version if you choose. Example: URL filtering version 41291 can be reverted back to version 41189, and so on.

 

If you need additional assistance with any of the following steps please do not hesitate to call McAfee Web Gateway support

 

Locating software Version and Build number

Before attempting to build an update package you will need to locate the software version and build number as packages are specific to these numbers. This information can be verified by logging into the GUI of the appliance.

 

Offline Update URL

Access the following URL:  https://contentsecurity.mcafee.com/update

 

Creating the update package

Generating an update package will take the user through a series of steps ultimately creating the .upd package to be applied.

 

 

Step 1: Terms and Conditions

Accept the terms and conditions and click Next Step.

 

Step 2: Selecting the correct McAfee Product

McAfee offers offline updates for other products, be sure to select the correct McAfee product - McAfee Web Gateway is shown in this example

manualupdate.png

Step 3: Version and Build

Before attempting to build an update package you will need to locate the software version and build number as packages are specific to these numbers. This information can be verified by logging into the GUI of the appliance, referenced in the screenshot above.

Selecting Version and Build Number.png

 

Step 4: Select the features you want to update

After entering the Version and Build numbers select what should be included in the update package. Once the selections have been made click generate package. This will bring up another dialog box showing the progress of the update package.

1. Generate Update Package.png

 

Step 5: Generating the Update package

The amount of time it takes to generate the update package will be determined by the options selected and overall file size.

2. Generate Update Package2.png

 

Step 6: Downloading the Update Package

Once the offline update package is generated you will be prompted to download the .upd file to a specific location. It is recommended that the file be saved to mobile media such as USB. Download time will be determined by overall file size of the update package. Example: Features included in the update.

3. Download Update Package.png

 

Applying the Update Package

For uploading the update package file you will need to be logged in the GUI of the appliance. Configuration > [Appliance name] > Update Engines > Upload Update File...

 

This will bring up another dialog box where you can browse to the downloaded .upd file

 

Once the .upd file is located click update - this will apply the update to the appliance and show the overall process. It will display "Update finished" once its completed. Click close.

 

Verifying success

Verifying the version and date of last applied update can be done by viewing the information in the Charts and Tables section of the dashboard data. Dashboard > Charts and Tables.

 

Common Questions

Question: Is it possible to import older update packages (downgrading versions)?

Answer: Yes. Just follow the same process as outlined above using a previously downloaded offline update package. Keep in mind that McAfee will not keep older versions on its servers.

Labels (1)
Comments

x

I am using webgateway 7.4.0 .When I try to download the package with the corresponding version  & build no the kernel version is showing as 2.xx but i have the kernel with the version 3.xx something,does it create any problem ??????

Plzzz let me know how to move further..........

This is for updating the engine signatures.

The kernel shouldn't matter with regards to the offline update process. What do you mean?

Thanks for your update.......

When i try to download the webgateway update package with the corresponding version & build no that my webgateway have, the

download update package with different details showing kernel version as mlos-2.1 but when i take ssh of my webgateway type the command uname -r to see the kernel version it is showing as mlos-3.3xx.

So my question is that if there is a mismatch between kernel version from the package that i am downloading will it create any problem or is that OK......

Hi,

MLOS 3.3 is not a known version. Probably you are mixing up kernel and OS version, which are totally different values. You can grab the MLOS version by running

cat /etc/redhat-release

It should give you something like

McAfee Linux OS Server release 2.1 (Santiago)

MLOS 2.1 should be the most recent version. Nevertheless there is a relationship between MLOS and MWG version, so you cannot have the same MWG version on different MLOS versions - that means, as long as you type in MWG version and build number correctly you will obtain the correct packages.

Best,

Andre

Hi Andre,

Thanks for your response as it clears my confusion.........

Can anyone tell me how often updates are available?????/

Plzzzz can anyone tell me after approximately how many days updates are available......

Hi -

Offline updates should stay in sync with the most recent dats on the update server. The frequency of those updates depend on the specific dats. For instance, URL filter dats are updated frequently throughout the delay (upto 10-20), where as AV updates are updated less.

Contributors
Version history
Revision #:
3 of 3
Last update:
‎04-03-2018 12:53 PM
Updated by:
 

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community