| 15.7 |  | Enterprise PIX Management |
| 15.7.3 |  | Auto Update Server (AUS) |

| AUS makes enterprise management of PIX Security Appliances easier. Firewalls operating in auto-update mode periodically contact AUS to upgrade software images, configurations, and versions of PDM, and to pass device information and status to AUS. AUS can also manage devices that obtain their addresses through Dynamic Host Configuration Protocol (DHCP) or that sit behind Network Access Translation (NAT) boundaries.

If AUS is deployed behind a NAT boundary in either the enterprise network or the enterprise DMZ, then the PIX Security Appliances being managed by AUS must all be on the same side of the NAT boundary. For example, the AUS can be deployed in the DMZ behind a NAT boundary and manage devices that were deployed only on the Internet. AUS cannot be deployed in the DMZ behind a NAT boundary with some devices using private addresses inside the boundary while some are on the outside on the Internet.

The AUS provides the following features:

- Web-based interface for maintaining multiple PIX Security Appliances
- Support for PIX Security Appliance operating systems 6.0 and above
- Ability to support dynamically addressed PIX Security Appliances
- Support for up to 1000 PIX Security Appliances
- Support for the PIX 501, 506E, 515, PIX 525 and PIX 535