Cisco Cisco Web Security Appliance S660 Release Notes

This release runs only on virtual appliances as described in 

. It does not run on any S-Series physical hardware appliance. 

AsyncOS for Web 7.7.5 does not directly support backward compatibility with configuration files from 
previous versions of AsyncOS for Web, such as 7.5.1 or 7.7.0. 

However, a Configuration Migration Tool is available to convert a configuration file from select versions 
of AsyncOS into a new file that can be uploaded to a virtual appliance. 

For details, see the Release Notes for the Configuration Migration Tool for Cisco Content Security 
Virtual Appliances at 

. 

Instructions for installing the Cisco Web Security virtual appliance are available in the Cisco Content 
Security Virtual Appliance Installation Guide at 

.

It is extremely important to configure time and synchronization settings on your virtual machine in order 
to prevent random failures on your Cisco Web Security Virtual Appliance. Specific instructions are in 
the “Important! Preventing Random Failures” section of the Install Guide and must be followed 
precisely. 

Encrypted 
Private Keys

Use encrypted, password-protected private keys. Upload encrypted private keys 
and provide a password for the WSA to decrypt them. The WSA then stores these 
private keys by obfuscating/encrypting them with a password that is unknown to the 
user. When configurations are exported to a file, private keys remain obfuscated and 
unreadable to the user. The WSA can decrypt them when the configuration is 
loaded onto a WSA. See Uploading a Root Certificate and Key in the user guide or 
online help.

SNI extension for 
Transparent SSL 
Handshake

Access the Server Name Indication (SNI) extension to parse the destination server 
name. This is useful when making requests to virtual servers hosting multiple 
HTTPS websites such as youtube.com and google.com.

[Defect Number: 74969, CSCzv50011]