Subscription Updates
CyberEdge subscription services are updated regularly via Superloop's Threat Intelligence Service. Licensed subscriptions are updated as follows;
Category Web Filtering
The Category Web Filtering database is managed under the following configurations.
-
Local Database: The local categorisation database optimizes web categorisation performance by eliminating the need for slower, cloud-based DNS (Domain Name System) lookups, with the entire filtering database stored directly on the device.
-
Database Updates: Updates to the local database, including categorisation changes and the addition of newly registered domains, are continuously delivered through CyberEdge's real-time streaming service.
-
Cloud Lookups: For smaller devices such as cloud hosted virtual appliances or systems with limited storage capacity, Cloud based categorisation will be preferenced.
Important information
- A minimum of 30GB of free storage is necessary for the local categorisation database. If the system has less than 30GB of available storage, cloud lookups will be automatically enabled. To check your current operating mode, navigate to Security Centre > General > Advanced Configuration.
- The CyberEdge H, HR, HR2, and HR3 series appliances are configured by default to use local categorisation databases. If necessary, cloud lookups can be manually enabled by the system administrator via Security Centre > General > Advanced Configuration; however, this setup is not recommended for larger networks.
- There are no differences in categorisation between local and cloud-based databases.
- For website re-categorisation requests, approved changes will be delivered to the device via CyberEdge's Threat Intelligence Service. For more details on requesting domain re-categorisations, please refer to the Access Policy Test Tools.
A detailed list of CyberEdge Web Filtering categories can be found here
Firewall Application Signature Updates
Firewall application signatures for both new and existing applications are managed independently of the CyberEdge firmware release cycle. Signature bundles are streamed to the CyberEdge system as soon as they become available.
Important information
- New application signatures are released approximately every 30 days.
- Application signatures are updated and distributed approximately every 30 days.
- Updates to application metadata, including application names, families, and descriptions are distributed as it becomes available.
- Information on application signature updates, including the version bundle and last updated dates, can be found under System > Updates > Signature Updates.
Intrusion Prevention System (IPS) Signature Updates
Intrusion Prevention System signature updates are streamed to CyberEdge through the Threat Intelligence Service.
Important information
- New IPS Signatures are distributed weekly.
- Updates to existing IPS signatures are distributed weekly.
- Critical IPS signatures will be distributed in real time as they become available.
- To view the status of your IPS signature updates, go to System > Updates > Signature Updates.
Geo IP Location Updates
Geo IP location data is utilised by the firewall to create location-based rules within Access Policies. This data, which maps IP addresses to countries, is updated independently of the CyberEdge system as follows:
Important information
- Complete Geo IP categorisation is updated every 7 days.
- Automatic updates to existing Access Policies with the latest Geo IP data.
- To view the status of your IPS signature updates, go to System > Updates > Signature Updates.
Content Scanning Pattern Lists
Content Scanning pattern lists are distributed separately from the CyberEdge system. These updates include new words and phrases, along with modifications to existing content. Content scanning policies are automatically updated to incorporate the new lists.
Important information
- Content scanning lists are updated periodically as new trends emerge.
- Content considered as an elevated risk can be distributed on request, pending review.
- To view the updates status of Content Scanning, go to System > Updates > Signature Updates.