Cisco Cisco Web Security Appliance S670

On physical WSA appliances, builds 161 and 162 are identical. A last-minute issue (

) was 

found with build 161 when installed on virtual WSA appliances. The issue is corrected in build 162.

This build can be installed only on physical appliances; see the explanation in the previous section, 

.

This is a maintenance release; no new features were added.

See the “Fixed issues” search in 

 for 

additional information.

Identity Services Engine 
(ISE) versions

All versions of ISE up to 2.0 are supported.

Maximum HTTP 
Header Size

You can use the CLI command 

maxhttpheadersize

 to change the 

maximum HTTP header size for proxy requests. Increasing this value 
can alleviate Policy Trace failures that can occur when the specified user 
belongs to a large number of authentication groups, or when the 
response header is larger than the current maximum header size. 

This command was actually introduced in AsyncOS 9.0.

Identity Services Engine 
(ISE) versions

All versions of ISE up to 2.0 are supported.

Maximum HTTP 
Header Size

You can use the CLI command 

maxhttpheadersize

 to change the 

maximum HTTP header size for proxy requests. Increasing this value 
can alleviate Policy Trace failures that can occur when the specified user 
belongs to a large number of authentication groups, or when the 
response header is larger than the current maximum header size. 

This command was actually introduced in AsyncOS 9.0.