Cisco Cisco ScanSafe Web Security Leaflet
© YEAR Cisco and/or its affiliates. All rights reserved. This document is Cisco Internal.
Page 1 of 4
Controlled Availability FAQ
FAQ for Controlled Availability of ISR 4k Connector with CWS
Why are we going to market with controlled availability?
The Cloud Web Security connector for the ISR 4k is a highly requested feature and we want to ensure a
satisfactory customer experience along with speedy time to market.
The ISR 4k redirects traffic to the CWS web proxy through a GRE over IPSec tunnel. This requires a Next
Generation Tower (NGT) on the proxy end to accept the tunnel traffic. Not all the CWS towers are currently
upgraded to NGT, therefore the main consideration for controlled availability is to prevent customers from
attempting to deploy the solution using towers that have not yet been upgraded to NGT or are not yet tunnelling
enabled.
Although NGT readiness is the main reason for controlled availability there are other considerations that controlled
availability addresses:
Unsupported connectors (e.g. WAAS Express with Akamai)
Prevents exceeding the supported number of tunnels
Ensures correct software version for the ISR 4k
Active Authentication is not currently available and is due for release in Q1 CY16
What are the current towers that have the required tunneling capabilities referred to above??
Tunneling capability upon orderability
Available in Q1 CY2016
Dallas
Brasil
Chicago
Copenhagen
Sydney
Paris
San Jose
Singapore
London
Toronto
Miami
Tokyo
Secaucus
Frankfurt
When will controlled availability end?
A large proportion of CWS towers are currently on track to be NGT by April of 2016, if not earlier.
What do I need to know about the controlled availability process?