Cisco Cisco Web Security Appliance S360 User Guide

As mentioned in the previous section, you can install the version 4.0 software and your previously 
installed license will continue to provide WSA reporting. In addition, the embedded evaluation license 
will let you evaluate the hybrid reporting feature.

In order to migrate from WSA-only to hybrid reporting, you must open a 

 (TAC) support case to remove your existing license and install a new hybrid-reporting license that 

includes the complete list of source types—that is, the 

ciscocws

 source type is included. 

https://tools.cisco.com/ServiceRequestTool/scm/mgmt/case

Contacting TAC is necessary only if you are upgrading from version 3.0 WSA-only reporting to 
version 4.0 hybrid reporting.

After installing the version 4.0 software as a new Advanced Web Security Reporting user, to utilize WSA 
and Hybrid Web Security reporting, you can use the embedded evaluation license with no limitations 
during the term of the evaluation. To continue after the evaluation term, or to provide reporting beyond the 
evaluation limits, you must acquire a master hybrid license. With a new installation, utilize the infodoc 
supplied with your order to request the license.

If you encounter hybrid-reporting issues, before contacting Cisco, verify that you have purchased a CWS 
Log Extraction license (L-CWS-LOG-LIC=), and that you have set up your Advanced Web Security 
Reporting environment to import CWS logs.

In addition, ensure that the reporting-application license (issued with purchase of SMA-WSPL-LIC=, 
SMA-WSPL-LOW-LIC=, or SMA-WSPL-HIGH-LIC=) includes only the following source types: 

wsa_trafmonlogs

, 

wsa_accesslogs

, 

wsa_w3clogs

, 

wsa_syslog

, 

wsa_amplogs

, and especially 

ciscocws

. 

Using Cisco’s Advanced Web Security Reporting application to process logs of any other source type, for 
example 

ps

, will produce a license-violation error. This can happen if you install other applications 

which produce logs with alternate source types.

Initially, you will need at least an evaluation license good for a large volume of data to handle the 
historical data transfer. After that, you will need an Advanced Web Security Reporting license.

Consider the quantity of data to be indexed both during initial historical data upload, and on an 
on-going daily basis.

Acquire and upload an evaluation license sufficient for the historical data transfer. The evaluation 
license provided with the application may be

After your version 3.0 data has been transferred, acquire and upload an Advanced Web Security 
Reporting license sufficient for the anticipated data of the applicable source type to be indexed.

Change the license type from Trial to Evaluation or Web Security Reporting.