Updating File Reputation Databases

Before updating the file reputation signature database, do as follows:

• Checking the License Status

  Before updating the file reputation signature database, check the license status based on the sandbox type.

  • Cloud sandbox: depends on the cloud sandbox detection license, ensure that the license for the update service has been purchased and activated.
  • Local sandbox: does not depend on the license.

  To check the license status, perform the following operation:

  1. Choose System > License Management.

  2. In License Resource, search for the cloud sandbox inspection. Check whether the license is activated or expired in Status.

     • If Status is Disable, activate the license. For operations, see License Management.
     • If Status indicates that the service has expired, renew the corresponding license.

• Checking the Free Space of the CF Card and Memory

  Before updating the file reputation signature database, check whether the free space in the device CF card and memory is sufficient. The following table lists the CF card and memory space required for updating the file reputation signature database.

  Signature Database	CF Card Space	Memory Space
  File reputation signature database	USG6530E: 10 MB or higher Other models: 190 MB or higher	USG6510E/6510E-POE: 30 MB or higher USG6530E: 50 MB or higher USG6515E: 80 MB or higher USG6525E: 80 MB or higher USG6550E/6560E/6580E: 120 MB or higher USG6555E/6565E/6575E-B/6585E/6605E-B: 120 MB or higher USG6615E/6625E: 140 MB or higher USG6610E/6620E: 140 MB or higher USG6635E/6655E: 160 MB or higher USG6630E: 340 MB or higher USG6650E: 340 MB or higher USG6680E: 340 MB or higher USG6712E/6716E: 540 MB or higher

  Perform the following operation:

  1. Select Dashboard.
  2. In Device Information, check the available space of the CF card and memory.

• Checking the Signature Database Version

  Check the file reputation signature database version to determine whether the file reputation signature database needs to be updated.

  Details are as follows:

  1. Choose System > Update Center.
  2. In Signature Database Update, view Current Version of the file reputation signature database to be updated and determine whether it requires an update.

The file reputation signature database can be updated in either of the following modes:

• Online update

  If the FW can communicate with the update center (sec.huawei.com) directly over the Internet or through a proxy server, you can update the file reputation signature database in online mode.

  Online update has two ways:

  • Scheduled update

    The FW accesses the update center on a scheduled basis to search for the latest file reputation signature database. If the new version of file reputation signature database is found, the FW downloads the latest file reputation signature database to update the local file reputation signature database at scheduled time. For details about scheduled updating, see Scheduled Update.

  • Immediate update

    After the online file reputation signature database is updated, you can immediately update the local database instead of waiting for the scheduled update.

    The download address and process for manually updating the file reputation signature database is the same as that for the scheduled update. You can manually update the file reputation signature database at any time. For details, see Immediate Update.

• Local update

  When the FW is physically isolated from the Internet and no proxy server is deployed on the intranet, you can update the file reputation signature database locally. For details, see Local Update.

If an exception occurs after a signature database is updated, you can roll back the signature database to the source version. For details, see Version Rollback.

You can roll back to only one version. If you perform version rollbacks repeatedly, the version rollback is implemented between the current version and the rollback version.

The file reputation hotspot database is released by sec.huawei.com. After the update function of the file reputation hotspot database is enabled, the file reputation information in the cloud can be quickly obtained to block the latest threat files.