Cisco Cisco Web Security Appliance S680 Release Notes

Note There are no changes if the appliance used IronPort URL Filters before upgrading.

The set of URL categories for Cisco IronPort Web Usage Controls changed in AsyncOS 7.5 for Web. If 
you are upgrading from a pre-7.5 version, these changes may modify or disable existing policies. To 
understand, prepare for, control, and respond to these changes, see “Managing Updates to the Set of URL 
Categories” in the “URL Filters” chapter of the Cisco IronPort AsyncOS for Web User Guide.

See the 7.5 release notes for a table listing the changes to the set of URL categories that will occur when 
you upgrade to AsyncOS 7.7 for Web from a pre-7.5 version. For descriptions of the new categories, see 
the “URL Category Descriptions” section in the “URL Filters” chapter of the Cisco IronPort AsyncOS 
for Web User Guide.

Support for SSH 1 has been removed for this release. Therefore, before upgrade, you should do the 
following: 

Any remote host keys which use SSH 1 should be changed to SSH 2. Use the logconfig >  hostkeyconfig 
command in the CLI to make this change. 

For any log subscriptions that are configured to use SSH 1 as the protocol for SCP log push, choose SSH 
2 instead.

Change the access protocol or add a new SSH 2 key for any users configured to use only SSH 1. Use the 
sshconfig command in the CLI to make this change. 

Disable SSH 1 using the sshconfig > setup command in the CLI. 

When you upgrade from a version of AsyncOS for Web before version 7.1, all historical data stored on 
the Web Security appliance for the on-box reports will be erased. To retain this historical data, you must 
export each report to PDF before upgrading.

Familiarize yourself with known issues and limitations before you upgrade AsyncOS for Web using 
these resources: