Update USM Appliance Offline

Applies to Product: USM Appliance™ AlienVault OSSIM®

Updating your USM Appliance offline requires use of the following items

  • A USM Appliance ISO image
  • A USB drive with a USB 2.0 interface to burn the ISO image

In order to perform an offline update on AlienVault USM Appliance, you first need to download the ISO image of the version you desire. For instructions, see Download a USM Appliance ISO Image.

Then you need to burn the ISO image to a USB drive. For instructions, see Burn the USM Appliance ISO Image to a USB Drive.

Using an ISO image burned to a USB drive is the preferred way to update USM Appliance offline. However, the USM Appliance VMware image does not contain a USB controller, therefore you cannot connect a USB drive to it. For instructions on how to add a USB controller in a virtual machine, see VMware's knowledge base article about USB support.

If using a USB drive is not an option, you can upload the ISO image to a datastore and then access it through a CD or DVD drive. Click the following links for instructions from VMware documentation respectively

Finally, you can follow the procedure below to update your USM Appliance.

Important: To ensure performance, based on the USM Appliance data sheet, the update process terminates when you have more than 200 million events in the database.

To update the USM Appliance offline

  1. Connect to the AlienVault Console through SSH and use your credentials to log in.

    The AlienVault Setup menu displays.

  2. Select System Preferences.
  3. Select Update AlienVault System.
  4. Select Update (Offline).
  5. Insert the USB drive into the machine now, or connect the CD/DVD drive with the USM Appliance ISO image, and then press Enter (<OK>).

    The update process scans for any connected file system, either USB or CD/DVD, and mounts it automatically.