Cisco Cisco Web Security Appliance S670 Release Notes

I R O N P O R T A S Y N C O S 6 . 3 . 7 F O R W E B R E L E A S E N O T E S

Fixed: Appliance may lock up or reboot when tailing access logs in some cases

Previously, the Web Security appliance would lock up and reboot when viewing the access
logs with the

tail

CLI command on some versions of the hardware. This no longer occurs.

[Defect ID: 42438]

Fixed: HTTPS Proxy root certificate and key pair is erroneously overwritten when using
the Security Management appliance in some cases

Previously, when you used the Security Management appliance to load a configuration onto a
Web Security appliance, the HTTPS Proxy root certificate and key pair was erroneously
overwritten. This no longer occurs. [Defect ID: 42636]

Fixed: hostkeyconfig CLI command erroneously returns a traceback in some cases

Previously, using the

hostkeyconfig

CLI command erroneously returned a traceback

instead of listing the available subcommands when the appliance contained some invalid SSH
keys. This no longer occurs. [Defect ID: 48748]

Fixed: Uploading data to servers using a POST command fails in some cases

Previously, using a POST command to upload data to a server that sent an error code failed.
This no longer occurs. [Defect ID: 52504]

Fixed: Web Proxy erroneously returns some objects from the web cache instead of from
the web server in some cases

Previously, the Web Proxy erroneously returned some objects from the web cache regardless
of the “Accept-Encoding” HTTP header, ignoring the information given in the “Vary” HTTP
header. This no longer occurs. [Defect ID: 54474]

Fixed: Native FTP downloads fail with McAfee enabled in some cases

Previously, McAfee failed to scan some native FTP downloads with logs showing “Scanning
Error” error. This no longer occurs. [Defect ID: 54572]

Fixed: Cannot join the Active Directory domain in some cases

Previously, the Web Security appliance could not join the Active Directory domain due to
some Kerberos errors. This happened when the Active Directory server did not return the
expected reply to AsyncOS’s kinit request. The web interface displayed the following error
message:

“Error while fetching Kerberos Ticket from server ‘servername’:

This no longer occurs. [Defect ID: 54854]

Fixed: Compressed log files are not pushed to configured SCP or FTP servers

Previously, compressed log files were not pushed to configured SCP or FTP servers. This no
longer occurs. [Defect ID: 54944]