Cisco Cisco Expressway Release Notes
Changes in X8.5.1
Unified Communications Cisco Expressway Series Software Release Notes (X8.5.3)
Page 4 of 23
n
Spanish
n
Japanese
n
Korean
n
Russian
Note: These localizations apply to the X8.5.1 versions of UI and help.
Important behavior changes
MRA authorizations are now rate controlled by default, to reduce the load of unnecessary authorizations on
the Expressway. Take care when you upgrade because your current endpoint software may be reauthorizing
more often than necessary, which could result in the Expressway issuing HTTP 429 "Too Many Requests".
If you routinely see this error after upgrade, you can edit the rate control settings at
the Expressway. Take care when you upgrade because your current endpoint software may be reauthorizing
more often than necessary, which could result in the Expressway issuing HTTP 429 "Too Many Requests".
If you routinely see this error after upgrade, you can edit the rate control settings at
Configuration > Unified
Communications > Configuration > Advanced
.
Software enhancements
n
This release introduces rate control for successful authorisations, via MRA, of users accessing
collaboration services; this feature applies to SSO-authenticated users as well as non-SSO-authenticated
users.
collaboration services; this feature applies to SSO-authenticated users as well as non-SSO-authenticated
users.
n
The Single Sign-On feature introduced in X8.5.1 has been further improved in this release. The status
information concerning user tokens has been improved. You can also purge tokens issued to a user, or to
all users, if necessary. The UI for the SAML export feature has been improved.
information concerning user tokens has been improved. You can also purge tokens issued to a user, or to
all users, if necessary. The UI for the SAML export feature has been improved.
n
The cluster database (CDB) resiliency has been improved.
Changes in X8.5.1
since the previous release.
This maintenance release also builds on features introduced in the X8.5 release, as follows:
SSO over MRA
Single Sign-On over MRA is released with X8.5.1; this feature was previewed in X8.5. The Features in
X8.5.n section has been updated with information about SSO over MRA.
X8.5.n section has been updated with information about SSO over MRA.
The Expressway-C now defaults to SHA-256 for signing SSO requests it gives to clients, and you can
change it to use SHA-1 if required. In version X8.5, when the SSO feature was previewed, the Expressway-
C defaulted to SHA-1 and there was no way to select a different algorithm.
change it to use SHA-1 if required. In version X8.5, when the SSO feature was previewed, the Expressway-
C defaulted to SHA-1 and there was no way to select a different algorithm.
Note: If you were using the SSO feature with X8.5, this change may cause it to stop working after upgrade to
X8.5.1. You have two options to resolve this: leave the new default on the Expressway-C, and you may need
to reconfigure the IdP to expect requests to be signed with SHA-256 (recommended for better security); the
other option is to revert the Expressway-C's signing algorithm to SHA-1 for your IdP (go to
X8.5.1. You have two options to resolve this: leave the new default on the Expressway-C, and you may need
to reconfigure the IdP to expect requests to be signed with SHA-256 (recommended for better security); the
other option is to revert the Expressway-C's signing algorithm to SHA-1 for your IdP (go to
Configuration
> Unified Communications > Identity Providers (IdP)
, locate your IdP row, then in
Actions
column click
Configure Digest).
Jabber 10.6 File Transfer support
The Cisco Jabber file transfer over MRA limitation, which was previously documented in Expressway
documents, has now changed as follows:
documents, has now changed as follows: