Cisco Cisco Email Security Appliance C170
10
Release Notes for AsyncOS 9.0 for Cisco Email Security Appliances
Installation and Upgrade Notes
Configuration Files
Cisco does not generally support the backward compatibility of configuration files with previous major
releases. Minor release support is provided. Configuration files from previous versions may work with
later releases; however, they may require modification to load. Check with Cisco Customer Support if
you have any questions about configuration file support.
releases. Minor release support is provided. Configuration files from previous versions may work with
later releases; however, they may require modification to load. Check with Cisco Customer Support if
you have any questions about configuration file support.
Received Headers
When you configure AsyncOS to use received headers, you can specify that the header reflects one of
the following hostnames:
the following hostnames:
•
The hostname of the Virtual Gateway used for delivering the message
•
The hostname of the interface the message is received on
You specify the hostname from the CLI command listenerconfig-> setup. You cannot configure the
hostname from the web interface.
hostname from the web interface.
If you configure the received header to display the hostname of the interface the message is received on,
a strip-header filter action configured to strip received headers will strip the received header inserted
by AsyncOS.
a strip-header filter action configured to strip received headers will strip the received header inserted
by AsyncOS.
Feature Keys
The AsyncOS appliance checks for and applies feature keys at one minute intervals. Therefore, when
you add a feature key, it may take up to a minute to view the changes.
you add a feature key, it may take up to a minute to view the changes.
Resource Conservation Mode
From AsyncOS 8.5.x for Email, Email Security appliance will enter resource conservation mode when
the RAM utilization exceeds 45% and the allowed injection rate is gradually decreased as RAM
utilization approaches 60%. Appliances with large memory utilization, especially with large system
quarantine, can enter resource conservation immediately after upgrading to AsyncOS 8.5.x for Email.
To avoid this scenario, make sure that you reduce the system quarantine to a few thousand messages
before upgrading.
the RAM utilization exceeds 45% and the allowed injection rate is gradually decreased as RAM
utilization approaches 60%. Appliances with large memory utilization, especially with large system
quarantine, can enter resource conservation immediately after upgrading to AsyncOS 8.5.x for Email.
To avoid this scenario, make sure that you reduce the system quarantine to a few thousand messages
before upgrading.
DLP Policies on RSA Enterprise Manager
If you are using RSA Enterprise Manager to manage DLP policies, after upgrading to AsyncOS 9.0 for
Email, the association of the policies on RSA Enterprise Manager with Mail Policies on AsyncOS
breaks. This is because, in AsyncOS 9.0 for Email, Mail Policies are handled differently from the
previous releases. To overcome this scenario, you must reassociate the DLP policies on RSA Enterprise
Manager with Mail Policies on AsyncOS. For instructions, see
Email, the association of the policies on RSA Enterprise Manager with Mail Policies on AsyncOS
breaks. This is because, in AsyncOS 9.0 for Email, Mail Policies are handled differently from the
previous releases. To overcome this scenario, you must reassociate the DLP policies on RSA Enterprise
Manager with Mail Policies on AsyncOS. For instructions, see
Chapter 17, “Data Loss Prevention”
of
the Cisco AsyncOS for Email User Guide.
File Analysis Quarantine
•
If you have manually created a policy quarantine with the name "File Analysis," you must eliminate
this quarantine before upgrading.
this quarantine before upgrading.