Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Manual Updates

If your deployment includes a JSA Console that is unable to access the Internet, or you want to manually manage updates to your system, you can manage the update process manually by setting up a JSA update server.

The autoupdate package includes all files necessary to manually set up an update server in addition to the necessary system configuration files for each update. After the initial setup, you only need to download and uncompress the most current autoupdate package to manually update your configuration.

Configuring an Update Server

Configure an Apache server as the update server for your JSA deployment.

Download the autoupdate package from Juniper Customer Support.

  1. Access your Apache server and create an update directory named software/jsa/autoupdate/.

    By default, the update directory is in the web root directory of the Apache server. You can place the directory in another location if you configure JSA accordingly.

  2. Optional: Create an Apache user account and password to be used by the update process.

  3. Save the autoupdate package file on your Apache server in the software/jsa/autoupdate/ directory that you created.

  4. On the Apache server, type the following command to uncompress the autoupdate package.

    tar -zxf updatepackage-[timestamp].tgz

  5. On the navigation menu (), click Admin.

  6. In the System Configuration section, click Auto Update.

  7. Click Change Settings, and click the Advanced tab.

  8. In the Server Config pane parameters, configure the settings for the Apache server.

    1. In the Web Server field, type the address or directory path of your Apache server.

      If the Apache server runs on non-standard ports, add the port number to the end of the address. For example, type https://<server name/ip>:<server port>.

    2. In the Directory field, type the directory location where the web server stores the updates.

      The default directory is software/jsa/autoupdate/.

    3. Optional: If the application server uses a proxy server to connect to the Internet, type the URL in the Proxy Server field.

    4. Optional: If you are using an authenticated proxy, type the credentials in the Proxy Username and Proxy Password fields.

  9. Click Save.

  10. On the Admin tab, click Deploy changes.

  11. Using SSH, log in to JSA as the root user.

  12. Type the following command to configure the user name that you set for your Apache server:

    /opt/qradar/bin/UpdateConfs.pl -change_username <username>

  13. Type the following command to configure the password that you set for your Apache server:

  14. To test the update server, type the following command as a single line of text in the command line interface.

  15. Type the user name and password.

Configuring the JSA Console As the Update Server

To streamline your maintenance process, you can configure your JSA Console to be your update server so that JSA updates are automatically downloaded to the Console.

  1. Download the auto update package from Juniper Customer Support.

  2. Save the auto update package file in the /tmp/ directory on your JSA Console.

    The size of the auto update file is approximately 2 - 5 GB.

  3. Log in to JSA as the root user.

  4. Type the following command to create the auto update directory:

    mkdir -p /opt/qradar/www/software/jsa/autoupdate/

  5. To verify that the Console has enough space for the auto update file, type the following command:

    df -h /opt/qradar/

    If you do not have enough space in the current directory, you can create another directory structure in the /store directory, such as /store/downloads

    1. Create a symbolic link to /opt/qradar/www/software/jsa/autoupdate/ by typing the following command:

      ln -s /store/downloads/autoupdates /opt/qradar/www/software/jsa/autoupdate/

    2. To verify that the symbolic link was created properly, type the following command:

      touch /store/downloads/testfile

    3. Confirm that the test file value is created in the /opt/qradar/www/software/jsa/autoupdate/ directory by typing the following command:

      ls /opt/qradar/www/software/jsa/autoupdate/

  6. Copy the autoupdates-<version>.tqz> file from the /tmp/ directory to the JSA Console, and place it in the /opt/qradar/www/software/jsa/autoupdate/ directory or the symbolic link directory that you created in 5 (a).

  7. On the JSA Console, type the following commands to extract the auto update package:

    cd /opt/qradar/www/software/jsa/autoupdate/

    tar -zxf /tmp/<name_of_autoupdate_file>

  8. Log in to JSA.

  9. On the navigation menu (), click Admin.

  10. In the System Configuration section, click Auto Update.

  11. Click Change Settings, and select Advanced tab.

  12. In the Directory field, type software/jsa/autoupdate/

  13. In the Web Server field, type https://<console_IP_address_or_hostname>

  14. Click Save.

Your JSA autoupdate directory is created, the autoupdate package downloaded, and the configuration for autoupdates is complete.

Downloading Updates to the Update Server

You can download updates from Juniper Customer Support to your update server.

You must configure your update server and set up JSA to receive updates from the update server.

  1. Download the autoupdate package from Juniper Customer Support.

  2. Save the autoupdate package file on your update server in the software/jsa/autoupdate/ directory that you created.

  3. Type the following command to uncompress the autoupdate package:

    tar -zxf autoupdate-[timestamp].tgz

  4. Log in to JSA as the root user.

  5. Type the following command to test your update server:

    wget https://<your_update_server>/<directory_path_to_updates>/manifest_list

  6. Type the user name and password of your update server.

Related Documentation