Cisco IronPort AsyncOS 7.0.1-010 for Email GA Notification

Cisco, is pleased to announce the General Availability (GA) of a new major release of AsyncOS 7.0.1-010 for Email to all customers. This release applies to all our Email Security Appliances (C- and X-Series). Code named "Bally's" internally (yes, after the Casino), this release is packed with major new functionality. We have completed our usual, extensive Beta test process as well as a 2 month FCS time period; over 500 customers have already upgraded.  Though we always recommend customers test out new releases before upgrading all of your production servers, we have great confidence in this release. Please upgrade and tell us what you think!
Note for Security Management Appliance (SMA) customers. To report on the new features in 7.0.1, you'll need to upgrade your M-Series to AsyncOS 6.7.6-068.
New Features and Enhancements in AsyncOS 7.0.1-010 for       Email
New Feature: RSA Email Data Loss Prevention (requires Feature         Key)
New Feature: Guaranteed Secure Delivery (requires PXE         Encryption Feature Key)
New Feature: Unwanted Marketing Message Detection
Enhanced: Prioritized SMTP Routes
Enhanced: RADIUS Groups and Protocols for External         Authentication
Enhanced: Quarantined Messages Attachments Enhancements
Enhanced: PXE Encryption Enhancements
PXE Encryption Enhancements
AsyncOS 7.0 provides the following enhancements to IronPort         Email Encryption:
Guaranteed Secure Delivery
Encrypt on Delivery
Encrypt on Quarantine Exit
Multi-Envelope Branding
Automatic PXE Engine Updates
Fixes in AsyncOS 7.0.1-010
Fixed: TLS/SSL Man-in-the-Middle Vulnerability [Defect ID:         55972]
Fixed: Reporting Engine Stops Allocating Memory, Stops         Processing Data, and Causes an Application Fault When the         Housekeeper Thread Stops [Defect ID: 52048]

Thanks!
Since started on Ironport ESA 3 years ago, UCE handling has always be problematic (basically, UCE is never treated as spam).
I hope the new Unwanted Marketing Message Detection feature fixes that!

Similar Messages

  • Cisco IronPort AsyncOS 6.7.6-068 for Management GA Notification

    Cisco is pleased to announce the General Availability (GA) of a new major release of AsyncOS 6.7.6-068 for
    Management to all customers. This release applies to all our Security Management Appliances (M-Series).
    AsyncOS 6.7.6-068 for Management enables Centralized Tracking and Reporting for the new features introduced in AsyncOS 7.0 for Email.
    New Features and Enhancements in AsyncOS 6.7.6-068 for Management
    New Feature: Centralized support for the reporting and tracking changes in the AsyncOS for Email release 7.0:
    RSA Data Loss Prevention
    Marketing Message Detection
    New Feature: Reporting by ESA Groups
    Enhanced: Domain-Based Executive Summary Report now configurable by:
    Domain of Email Server
    Domain of Email Address
    Fixes in AsyncOS 6.7.6-068 for Management
    Fixed: MemoryError after losing Housekeeper thread [Defect ID: 52048]
    Fixed: The Show Details link results in a timeout [Defect ID: 51558]
    Fixed: Safelist/Blocklist should be exportable via CLI [Defect ID: 43360]
    Fixed: LDAP Query strips spaces [Defect ID: 46099]
    Fixed: Tracking database time does not update after system timezone is changed [Defect ID: 49407]
    Fixed: Application error when accessing Online Help from the End User Spam Quarantine page [Defect ID: 52395]
    This release has gone through our beta program, internal soak tests and is also running in production at our FCS customers.
    Please upgrade at your convenience and let us know how you like this new release!
    Cheers,
    Jakob

    Hi,
    We identified an issue in AsyncOS 6.7.6-068 for Management that under certain circumstances can cause loss of historical reporting data when reporting groups are configured. To ensure a high quality release, further testing on our side is required.
    6.7.6-068 is no longer available for upgrade to your M-Series appliances.
    If you already upgraded to 6.7.6-068 we strongly recommend to disable group based reporting to avoid being affected.
    We expect to release a new improved build of 6.7.6 shortly and apologize for any inconvenience or confusion this might have caused.
    If you are required to upgrade to 6.7.6 before a new build is available, please contact Cisco IronPort Customer Support.
    I'll let you know once the new build is available...
    Best Regards,
    Jakob

  • AsyncOS 5.5.1-014 for Email is now available

    UPDATE: 2008-2-26 5.5.1-014 releases:
    This release includes a number of fixes:
    * Fixed: Appliances Are Not Generating SNMP Traps
    * Fixed: Leftover Files Are Deposited in scanning_temp_files Directory
    * Fixed: DNS-Related Memory Issues Delay Acceptance of Incoming Mail
    UPDATE: 2007-12-17 5.5.1-011, 5.1.2-011, 4.7.2-005 releases:
    This release includes a number of updates and fixes:
    * Fixed: 35715,38152,38531,38532 Consolidated LDAP fixes
    * Fixed: 38506,38527 Certain malformed messages can severely degrade performance
    * Fixed: 38274 IronPort Spam Quarantine alias consolidation issues with Active Directory
    * Fixed: 38248 Clustered SafeList/BlockList incorrectly prompts for login
    About Earlier Builds of AsyncOS for Email
    38527 is also present in earlier builds of AsyncOS for Email. Due to the potential severity of this issue we have also patched the earlier versions listed below, customers who are not ready to upgrade to 5.5.1-011 are encouraged to upgrade to one of these builds:
    5.1.2-011
    4.7.2-005
    UPDATE: 2007-11-28 5.5.1-010 releases:
    This Hot Patch release contains the following feature and stability fixes
    * New: PCI, HIPAA, GLB and SOX dictionaries preloaded for use in content and message filters
    * 37711 Logging into the IronPort Spam Quarantine generates error
    * Fixed: 37971 LDAP can slow delivery after log subscription update
    * Fixed: 37772 LDAP routing host is ignored when the routing address matches the original address
    * Fixed: 36408 application fault in smtpauth
    IronPort Systems is pleased to announce the release of AsyncOS 5.5.1-010 for Email for all C-Series and X-Series Email Security Appliances. This release includes all of the powerful new tools for integrated Data Loss Prevention and Encryption released in AsyncOS 5.5.0 as well as critical security patches. IronPort recommends all customers to upgrade to 5.5.1.
    * New Feature: IronPort PXE Encryption
    * Enhanced: Content Scanning capabilities for Data Loss Prevention
    * Enhanced: LDAP Capabilities
    * New Feature: DKIM Authentication
    * New Feature: End-User Safelists and Blocklists
    * Enhanced: Reporting
    * Enhanced: Web User Interface
    * Updated: Brazilian DST
    * Fixed: Double-Byte character rendering in IronPort Spam Quarantine
    * Fixed: Performance optimization of disabled content filters
    * Fixed: Virtual gateway delivery to host with invalid DNS entry may disrupt mailflow
    NOTE: For customers running pre 5.5.0 releases, there is no requirement to upgrade to 5.5.0 first. If 5.5.1 appears as an available upgrade customers are encouraged to upgrade directly to 5.5.1.
    Customers running older builds who are not ready to move to 5.5.1, are encouraged to upgrade to our current patched builds:
    - 5.1.2-014
    These builds provide out latest stability fixes.
    Webinar for Selected New 5.5.0 Features
    We are pleased to offer a webinar that presents information about Safelist/Blocklists, Smart Identifiers and DKIM. You can download the webinar from the Support Portal:
    http://tinyurl.com/2o28uw
    Preparing to Upgrade
    As a best practice, IronPort recommends preparing for an upgrade by taking the following steps:
    1. Save the XML configuration file off of the appliance.
    2. Suspend the listeners.
    3. Drain the mail queue and the delivery queue.
    4. Re-enable the listeners after you upgrade.

    I haven't upgraded to 5.5.0 yet, but I was very excited to learn about end-user whitelists and blacklists, which is something we'd been pushing for since we bought our Ironports. Unfortunately, it looks like it's being implemented in a way that makes it impossible for me to deploy at this time.
    We have two C350s, and would need the whitelists and blacklists to appear on each box. It appears that I could do this by exporting the database from one machine, transferring it to the other, and then importing it. However, this appears to ONLY be able to be done via the GUI.
    This is a showstopper for me, because I do not want to have to log into the Ironport every day to import and export the databases - I would want to automate it. I talked to technical support, and it appears that there is no way to do this via the CLI.
    My feature request is this: please consider adding a command that would allow me to remotely force the database to be dumped, and another command to import the database.
    Ideally, it would be something like:
    safelistconfig dump
    safelistconfig import
    If that was available, I would make my users a lot happier with this feature.

  • How to switch language settings for email alerts/notifications?

    Verizon has erroneously identified me as a Spanish speaker based on my husband's last name (Pique). Since I have registered for my data usage plan for my iPad, I receive some messages from Verizon in Spanish and others in English. All of my payment confirmations and data usage alerts are in Spanish and I see no way to correct the language preferences online in my user account. I have tried to contact Verizon via telephone but the support person with whom I spoke was less than helpful and I was disconnected before a solution was actually reached. Has anyone had this problem and, if yes, were you able to resolve it successfully and what did you do?
    Thanks,
    Lynn

    Take a look at this link, http://translate.google.com/translate?sl=de&tl=en&js=n&prev=_t&hl=de&ie=UTF-8&la yout=2&eotf=1&u=http%3A%2F%2Fwww.loggn.de%2Fosx-filevault-2-falsches-kennwort-ta staturlayout-auf-dem-anmeldefenster%2F&act=url

  • AsyncOS 7.1.1 for Email is GA

    Hi,
    Cisco is pleased to announce the General Availability (GA) of a new major release of AsyncOS 7.1.1-012 for Email to all customers. This release applies to all our Email Security Appliances (C and X-Series).
    Please be advised that a new maintenance release AsyncOS 7.0.2-007 for Email is also currently generally available to all customers. We highly recommend upgrading to AsyncOS 7.1.1-012 for Email, if you plan to use any of the new features and enhancements listed below.
    New Features and Enhancements in 7.1.1-012 for Email
    Enhancement: DLP Assessment Wizard (Requires RSA DLP Feature Key)
    Enhancement: New RSA Email DLP Policy templates support (Massachusetts CMR-201 and Corporate Financials)
    Enhancement: TLS Administration Enhancements
    Enhancement: No Authentication Encryption Envelope (Requires IronPort Email Encryption Feature Key)
    New Feature: Administrative Access Control List
    New Feature: Customized Login Banner
    Partial list of defects fixed in 7.1.1-012 for Email
    Fixed: A Malformed Viral Message can potentially cause a Mail Outage, when using McAfee as AV engine with non-default settings [Defect ID: 68615]
    Fixed: Some Viral messages can be reported unscannable and potentially delivered, when using Sophos as AV engine with non-default settings [Defect ID: 68896]
    Fixed: Extra Spaces in Footer When Forwarding via Outlook [Defect ID: 67312]
    Fixed: Demo Certificate Becomes Default Certificate After Upgrade to AsyncOS 7.1 for Email [Defect ID: 69456]
    Fixed: Application Fault Occurs When Switching Cluster Levels in Encryption Profile [Defect ID: 55874]
    Fixed: Robustness Fixes for Lockups on C160 Appliances [Defect ID: 68955]
    Fixed: Invalid Regular Expressions Affects RSA Email DLP Scanning [Defect ID: 67002]
    For further information about this release, please refer to the AsyncOS Release Notes. The release notes are available on our Support Portal.
    https://supportportal.ironport.com
    Thank you for choosing Cisco IronPort Security Products.
    Best,
    Kishore

    I haven't upgraded to 5.5.0 yet, but I was very excited to learn about end-user whitelists and blacklists, which is something we'd been pushing for since we bought our Ironports. Unfortunately, it looks like it's being implemented in a way that makes it impossible for me to deploy at this time.
    We have two C350s, and would need the whitelists and blacklists to appear on each box. It appears that I could do this by exporting the database from one machine, transferring it to the other, and then importing it. However, this appears to ONLY be able to be done via the GUI.
    This is a showstopper for me, because I do not want to have to log into the Ironport every day to import and export the databases - I would want to automate it. I talked to technical support, and it appears that there is no way to do this via the CLI.
    My feature request is this: please consider adding a command that would allow me to remotely force the database to be dumped, and another command to import the database.
    Ideally, it would be something like:
    safelistconfig dump
    safelistconfig import
    If that was available, I would make my users a lot happier with this feature.

  • 6.3.5-003 and 6.1.5-110 for Email is now available.

    IronPort Systems is pleased to announce the General Availability
    of AsyncOS 6.3.5-003 for Email and a Maintenance Release of
    AsyncOS 6.1.5-110 to all customers. These releases apply to all
    our Email Security Appliances (C-Series and X-Series) and
    Security Management Appliances (M-Series).
    New Features, Enhancements, and Fixes in AsyncOS 6.3.5
    * New Feature: Image Analysis (Requires Feature Key)
    * New Feature: Detailed SMTP Logging
    * Enhanced: SPF Content Filter Conditions
    * Enhanced: SMTP Routing
    * New Hardware Support: Support for the new X1060 and M1060 appliances
    * Fixed: Bounce Verification Treats All Bounces As Invalid
    * Fixed: DHAP setting is not rejecting recipients
    New Features, Enhancements, and Fixes in AsyncOS 6.1.5
    * New Hardware support: Support for the new X1060 and M1060 appliances
    Please refer to the release notes for upgrade information.

    There is no mention of New Hardware Support: Support for the new X1060 and M1060 appliances on this link

  • Cisco AsyncOS 7.5.1-074 for Web FCS Release Notification

    Dear Cisco Web Security Customer,
    Cisco is pleased to announce a new maintenance release of AsyncOS 7.5.1-074 for Web to select customers (FCS). This release applies to all our Web Security Appliances (S-Series).
    Note: If you manage multiple Web Security Appliances using our Security Management Appliance (SMA) you need to upgrade the SMAs to AsyncOS 7.9.1-030 for Security Management (or higher).
    Partial list of defects fixed in AsyncOS 7.5.1-074 for Web
    Fixed: Rebooting an appliance without a proper shutdown sometimes caused irreparable damage to the appliance. This is fixed. [Defect ID: 73467]
    Fixed: Processing client requests sometimes took too long after updating new anti-malware rules. This is fixed. [Defect ID: 81055]
    Fixed: Overloading webroot made the WSA unusably slow. This is fixed. [Defect ID: 81661]
    Fixed: With Safe Search enabled, for URLs that included a question mark (?) in the first position after the domain name, for example, "example.com/?abc", transaction requests were resulting in an HTTP 404 error message. This is fixed. [Defect ID: 83666]
    Fixed: Download time for Web Tracking data in CSV format was excessive when specifying a custom time range for the report. This is fixed. [Defect ID: 85964]
    Fixed: After upgrading to 7.5, attempts to bring additional Web Security Appliances online were unsuccessful due to port-number mismatches between the Appliance and the WCCP router. AsyncOS now sorts port numbers from smallest to largest to prevent mismatches. This is fixed. [Defect ID: 86704]
    For further information about this release, please refer to the AsyncOS Release Notes attached to this annoucement.
    If you are concerned about an issue not listed there, please contact your authorized support provider to make an inquiry.
    How to Upgrade
    Prior to upgrading to this release, please read the Release Notes referenced above and save a copy of the configuration file somewhere other than on your appliance.
    Once you have read the Release Notes you may log into the command line of your IronPort Appliance as the 'admin' user, and type 'upgrade', or use the WebUI upgrade functionality in the 'System Administration' tab.
    You may upgrade directly to the highest version available in the displayed list.
    **NOTE** It is important that you follow the upgrade instructions available in the Release Notes. If you do attempt to upgrade and do not see the desired release version available, your appliance is likely not on a version allowed to upgrade directly. See 'Upgrade Paths' below.
    Upgrade Paths
    Please refer to the Release Notes for qualified upgrade paths.
    If your systems are on any other AsyncOS release, you will need to perform multiple upgrades as specified in the release notes. Only the immediate next step in the upgrade path will be shown to you, with the next revision being shown once you are at the approved level.
    Release Stage
    First Customer Ship (FCS): This release has been fully qualified for production usage by Cisco IronPort. It has been extensively tested for functionality and stability. Following a staged release process, we offer select customers the chance to benefit from new features and enhancements as early adopters.
    Thank you for choosing Cisco Security Products.
    Best Regards,
    Cisco Content Security Customer Support
    Support Portal: http://cisco.com/web/ironport
    Toll-Free Customer Support
    United States: 1-877-641-IRON (4766)
    International: http://www.cisco.com/web/ironport/contacts.html#~tab-3
    NOTICE: CISCO SYSTEMS CONFIDENTIAL AND PROPRIETARY This document contains information which is both confidential and proprietary to IronPort. Neither this document nor the information contained herein shall be copied, disclosed to others or used for any purposes beyond the specific purpose for which this document was delivered without the express written permission of IronPort. If you receive this message in error, please notify the sender and destroy the attached message (and all attached documents) immediately.
    © 2012 Cisco Systems, Inc. All rights reserved.

    Hello Sergio,
    To get to Ironport Dcoumentation, please do the following:
    1) go to www.cisco.com
    2) Login with CCO id and password
    3) Select support
    4) On resulting page, under Prduct Name, select Security
    5) You should see  "Email Security" and "Web Security" option there, which will bring you to the Documents.
    For WSA the doc guides are here http://www.cisco.com/en/US/customer/products/ps10164/products_user_guide_list.html
    For The ESA the doc guides are here http://www.cisco.com/en/US/customer/products/ps10154/products_user_guide_list.html
    Regards,
    Eric

  • Configuring Cisco/IronPort plugin for Outlook with CRES

    With the discontinuation of the IronPort IEA appliances we are getting ready to move from our on-premise IEA appliances to CRES.  I have a demo key for Encryption that I am running on my C660s and I have an Outlook client configured with the Email Security Plug-In version 7.2.0.39.  Currently the Outlook Plug in is configured to point to our on premise IEA appliances for the Server URL attribute in Desktop Encryption Options and is working great.
    My question is, what do I use to connect it to CRES for desktop encryption?
    The Admin guide "Cisco IronPort Email Security Plug-in 7.2 Administrator Guide" page 4-46 just says "Server URL Enter the URL for your  Encryption server."
    Thanks

    Hi Jason,
    Thanks for your question.  The short answer is https://res.cisco.com:443 HOWEVER please note the following two points.  First, you will need a CRES account, so that you can download a token to use with the plugin, to authenticate to CRES; you cannot use the default token which you have probably been using with your IEA.  Second, using the current Outlook plug-in version 7.2 with CRES is not supported; it works, but it is not supported.  There are plans to release a supported version.

  • Any methods to simulate Cisco IronPort WSA appliance for practice

    Similar to GNS3 on which we can simulate ASA/Routers, same way any other methods to simulate Cisco IronPort WSA appliance for practice or testing? Please let me know. Thanks.

    You can download the virtual WSA. I have not tried it so I'm not sure how it works without a license.
    http://software.cisco.com/download/release.html?mdfid=284806698&flowid=41610&softwareid=282975114&release=7.7.5&relind=AVAILABLE&rellifecycle=GD&reltype=latest

  • AsyncOS 6.5.3 for Email and Management is GA

    Hi,
    On Monday (08/17) we released AsyncOS 6.5.3 for Email and Management to all customers. Here is a summary of the fixes included in this release. Please have a look at the release notes for a more comprehensive list or contact Cisco IronPort Customer Support if you have questions in regards to anything specific that is not listed there.
    Partial list of defects fixed in 6.5.3-007:
    * Fixed: Clustered Appliances Don’t Close Orphaned Connections. [Defect ID: 40184 and 34441]
    * Fixed: 30 connections to ldap when max=10 [Defect ID: 45194]
    * Fixed: Multibyte filename for encrypted attachment can be corrupted [Defect ID: 45721]
    * Fixed: Export on Delivery Status page on Monitor tab only gives 10 entries when 100 are displayed [Defect ID: 46977]
    I'd like to encourage you to have a look at the release notes and to upgrade to 6.5.3 at your convenience.
    Please be advised that due to some optimizations for future upgrades, it will not be possible to revert from 6.5.3 to versions earlier than 6.5.0.
    Let us know how you like it!
    Best,
    Jakob

    this is a bit old now, can it be un-stickied?
    As you wish! :)

  • AsyncOS 6.3.5-015 for Web is GA

    Hello,
    Cisco is pleased to announce the General Availability (GA) of a maintenance release of AsyncOS 6.3.5-015 for Web to all customers. This release applies to all our Web Security Appliances (S-Series).
    We specifically encourage customers that are using a previous version of AsyncOS 6.3.4 for Web and customers on the S160 hardware platform to take advantage of the fixes outlined below by upgrading their Web Security Appliances to this latest release.
    Partial list of defects fixed in AsyncOS 6.3.5-015 for Web
    Fixed: Web Proxy does not properly tunnel CONNECT requests in some cases [Defect ID: 71947]
    Fixed: Accessing some web servers fails when an upstream proxy server is configured [Defect ID: 56386]
    Fixed: Web Proxy generates a core file connecting to some HTTPS servers [Defect ID: 69397]
    Fixed: Web Proxy generates a core file in some networks with an upstream proxy server [Defect ID: 72022]
    Fixed: Additional logging and robustness fixes have been added to provide stability on 1U platform [Defect ID:68955]
    For further information about this release, please refer to the attached AsyncOS Release Notes.
    Thank you for choosing Cisco IronPort Security Products.
    Best Regards,
    Eduardo

    .

  • AsyncOS 7.0.0-819 for Web is GA

    Hello,
    Cisco is pleased to announce the General Availability (GA) of a new major release of AsyncOS 7.0.0-819 for Web to all customers. This release applies to all our Web Security Appliances (S-Series).
    Please be advised that AsyncOS 7.1 for Web is expected to be available shortly. This release will contain all the functionality contained in 7.0 plus support for advanced reporting and tracking as well as support for centralized management of 7.0 features using a Cisco IronPort Security Management Appliance (M-Series). If you are using a M-Series device to manage your Web Security Appliances, you may want to wait for the availability of AsyncOS 7.1 for Web.
    New Features and Enhancements in AsyncOS 7.0.0-819 for Web
    New Feature: Cisco AnyConnect Secure Mobility
    New Feature: Application Visibility and Control
    New Feature: Safe Search and Site Content Rating
    New Feature: Bandwidth Control for Streaming Media
    New Feature: HTTP Instant Messaging Controls
    New Feature: SaaS Access Control
    New Feature: Sophos Anti-Virus Scanning
    New Feature: Transparent User Identification for Novell eDirectory
    New Feature: Outbound Malware Scanning
    New Feature: Application Scanning Bypass
    New Feature: WBRS Threat Details
    New Feature: What’s New In This Release
    Enhanced: Per Identity Authentication Settings
    Enhanced: PAC File Hosting
    Partial list of defects fixed in AsyncOS 7.0.0-819 for Web
    Fixed: Access log entries are not written when custom fields use incorrect syntax [Defect ID: 72682]
    Fixed: Gateway Timeout errors occur for certain websites when HTTPS Proxy is enabled [Defect ID: 70547]
    Fixed: AsyncOS does not send compressed access logs to a remote server using FTP or SCP [Defect ID: 68332]
    Fixed: Web Proxy does not query all LDAP groups in some cases [Defect ID: 65977]
    Fixed: Web Proxy performance is slow with some complex configurations [Defect ID: 54720]
    Fixed: Application fault occurs when accessing an Access Policy with a non-existent Identity [Defect ID: 54676]
    Fixed: Web Proxy creates invalid cookies for requests to hostnames belonging to some particular top-level domains in some cases [Defect ID: 49758]
    For further information about this release, please refer to the attached AsyncOS Release Notes.
    Thank you for choosing Cisco IronPort Security Products.
    Best Regards,
    Eduardo

    Hi,
    I need to upgrade the AsyncOS of  WSA from version 6.0.1 819 to 7.0.0 819.
    In case the upgrade fails, I'd like to know if there is a way to roll back to an ealier version of AsyncOS.
    Thank you

  • AsyncOS 6.3.7-018 for Web is GA

    Hello,
    Cisco is pleased to announce the General Availability (GA) of a new maintenance release of AsyncOS 6.3.7-018 for Web to all customers. This release applies to all our Web Security Appliances (S-Series).
    Partial list of defects fixed in AsyncOS 6.3.7-018 for Web
    Fixed: Files do not completely download using native FTP RETR when the anti-malware action for Unscannable is set to Block in some cases [Defect ID: 74666]
    Fixed: Symbolic links are broken when viewing FTP directory in a browser [Defect ID: 3853]
    Fixed: FTP directory listing appears corrupt when using native FTP [Defect ID: 73015]
    Fixed: NTLM authentication fails after a period of time when a policy group uses many authorization groups [Defect ID: 44445]
    Fixed: AsyncOS does not send compressed access logs to a remote server using FTP or SCP [Defect ID: 68332]
    Fixed: Some HTTPS sites do not load when additional certificate authority certificates are manually installed on the appliance [Defect ID: 70306]
    Fixed: Some client applications cannot communicate with the Web Proxy with NTLMSSP authentication enabled [Defect ID: 72670]
    Fixed: Uploads fail when the connection between the Web Proxy and the destination server is slower than the connection between the Web Proxy and the client [Defect ID:72817]
    For further information about this release, please refer to the attached AsyncOS Release Notes.
    Thank you for choosing Cisco IronPort Security Products.
    Best Regards,
    Eduardo

    .

  • AsyncOS 6.3.1-028 for Web is GA

    Hi,
    Cisco is pleased to announce a maintenance release of AsyncOS 6.3.1-028 for Web to all customers (GA).
    This release applies to all our Web Security Appliances (S-Series).
    This new build addresses two severe defects that have been found in the former 6.3.1-025 GA release.
    We encourage you to upgrade to this new build to benefit from the enhanced stability in 6.3.1-028.
    Enhancements and Fixes in AsyncOS 6.3.1-028 for Web
    Fixed: Some transparent HTTPS requests erroneously bypass all Routing Policies
    and go directly to the Internet. [Defect ID: 55596]
    Previously, when Routing Policy membership depended on data in a request header,
    such as the URL, then transparent HTTPS requests failed to match the Routing Policy.
    Instead, they were routed directly to the Internet. This no longer occurs.
    Now, those transparent HTTPS requests match the Default Routing Policy.
    Fixed: Web Proxy generates a core file and restarts in some cases. [Defect ID: 65975]
    Previously, the Web Proxy generated a core file and restarted when repeatedly connecting to
    servers that delivered 503 Bad Gateway responses to the Web Proxy. This no longer occurs.
    For further information about this release, please refer to the AsyncOS Release Notes on our Support Portal:
    http://www.ironport.com/support/
    While you are there, take the chance to have a look at the other new releases available currently:
    Sawmill 7.3.2 and AsyncOS 6.3.3 FCS.
    For an overview over the different release stages, have a look at this knowledge base article:
    http://tinyurl.com/yzm4ysu
    Best Regards,
    Jakob

    .

  • Cisco Ironport Certificate ISsue

    Hai All,
    We have cisco ironport WSA 370 version 7.5 .
    We need to decrypt some https traffic . But the issue is our corporate AD support only 2048 bit cert. But our WSA box only support 1024.
    Heared that asycos 7.7 (new release) support 2048 bit cert.  When i check the 7.7 guide, its not mentioned. Can you please suggest???

    Hi Mohamed,
    There is a feature request so the WSA can generate 2048 bit certificate; but you can upload a an Intermediate root signing certificate to the appliance.
    Look for "Uploading a Root Certificate and Key"
    https://www.cisco.com/en/US/docs/security/wsa/wsa7.7/User_Guide/WSA_7.7.0_UserGuide.pdf
    HTH,
    Luis Silva
    "If you need PDI (Planning, Design, Implement) assistance feel free to reach"
    http://www.cisco.com/web/partners/tools/pdihd.html

Maybe you are looking for

  • Mail takes in the main window of a mailbox no click

    - like stalled. What to do, please? ~ Karl

  • [cs2][JS] Search/replace by glyphID

    Hi, Does any know to change some special characters by glyphID? What I'm trying to do is ... app.findPreferences = app.changePreferences = null; app.findPreferences.appliedFont = 'ITC Zapf Dingbats\tMedium'; app.changePreferences.appliedFont = 'ITC Z

  • XCelsius Live Office objects and save loss

    Hi all, I'm observing an abnormal behavior using Live Office 3.1 fp 1.8 inside Xcelsius 2008 SP3. Iu2019ve built Live Office queries based on OLAP universe inside Xcelsius; all is ok but when I close and reopen Xcelsius the queries lost some object o

  • Calculate/Display QTD in PL report

    Hi, We have 4 quarters, J-M, A-J, J-S, O-D. I need to calculate Quarterly balance which I am able to calculate by creating 4 RKF by using 0FISCPER3 object and one Key figure. My query is I need to display QTD balances of the entered month only, lets

  • Is lock status part of state?

    I am testing the concept that "every object has a lock, or can serve as a lock". test #1 Instances of immutable objects are not allowed to change "state"? Using immutable objects as locks: public class Main {   public static void main(String[] args)