Cisco Cisco Web Security Appliance S690 Release Notes

Page of 76
C I S C O   I R O N P O R T   A S Y N C O S   6 . 3 . 8   F O R   W E B   R E L E A S E   N O T E S
 
5
New Feature: Native FTP
Prior to AsyncOS for Web 6.0, the Web Security appliance supported FTP over HTTP in 
addition to HTTP and HTTPS.
With AsyncOS for Web 6.0, the Web Security appliance supports traffic sent over native FTP. 
This allows you to control and secure the native FTP traffic in your organization, in addition to 
HTTP and HTTPS traffic. For example, you can control users who are allowed to download or 
upload documents over FTP. You can also scan content downloaded over FTP with the 
IronPort DVS engine and the anti-malware scanning engines.
For more information, see the “Working with FTP Connections” section of the “Web Proxy 
Services” chapter of the IronPort AsyncOS for Web User Guide. You can view this chapter in 
the PDF or the online help.
New Feature: Multiple Identities in a Policy Group
In AsyncOS for Web 6.0, you can add multiple identities to a single non-identity policy 
group. This allows you to keep identities as granular as required, and then either associate 
them all with a single policy group or with different policy groups. This can be useful after a 
merger, when you need to keep the identities of the merged companies separate because they 
use different authentication realms, but use both these identities together in a single uniform 
policy.
For more information, see the “Configuring Identities in Other Policy Groups” section in the 
“Identities” chapter of the IronPort AsyncOS for Web User Guide. You can view this chapter 
in the PDF or the online help.
New Feature: Warning Users Before Continuing
With AsyncOS for Web 6.0, you can warn users that a site does not meet the organization's 
acceptable use policies and allow them to continue if they choose. To warn users and allow 
them to continue, configure the URL categories for an access policy group.
When users access a URL that is configured to warn and continue, they initially see an 
IronPort notification page with a warning about accessing sites of this category. The end-user 
URL category warning page includes a "continue" hypertext link to the originally requested 
URL. With this continue option, the end-user can review the company's acceptable use 
policy and, if desired, continue accessing the blocked site. End-user actions are appropriately 
logged.
For more information, see the “Warning Users and Allowing Them to Continue” section in the 
“URL Filters” chapter of the IronPort AsyncOS for Web User Guide. You can view this chapter 
in the PDF or the online help.
Enhanced: Authentication
AsyncOS 6.0 for Web includes several changes and enhancements to authentication.