Cisco Cisco Web Security Appliance S690 User Guide
A-12
AsyncOS 9.1 for Cisco Web Security Appliances User Guide
Appendix A Troubleshooting
Problems with File Reputation and File Analysis
Note
You can use the CLI command
maxhttpheadersize
to change the maximum HTTP header size for proxy
requests. Increasing this value can alleviate Policy Trace failures that can occur when the specified user
belongs to a large number of authentication groups, or when the response header is larger than the current
maximum header size. See
belongs to a large number of authentication groups, or when the response header is larger than the current
maximum header size. See
for more information
about this command.
Problems with File Reputation and File Analysis
See
Troubleshooting File Reputation and Analysis, page 17-14
.
Reboot Issues
Virtual Appliance Running on KVM Hangs on Reboot
Note
This is a KVM issue and may change at any time.
For more information, see
and
https://bugs.launchpad.net/qemu/+bug/1329956.
Step 1
Check the following:
cat /sys/module/kvm_intel/parameters/enable_apicv
Step 2
If the above value is set to Y:
a.
Stop your virtual appliances and reinstall the KVM kernel module:
rmmod kvm_intel
modprobe kvm_intel enable_apicv=N
b.
Restart your virtual appliance.
Hardware Appliances: Remotely Resetting Appliance Power
If a hardware appliance requires a hard reset, you can reboot the appliance chassis remotely using a
third-party Intelligent Platform Management Interface (IPMI) tool.
third-party Intelligent Platform Management Interface (IPMI) tool.
Restrictions
•
Remote power management is available only on certain hardware. For specifics, see Enabling
Remote Power Management, page 21-4.
Remote Power Management, page 21-4.
•
If you want be able to use this feature, you must enable it in advance, before you need to use it. For
details, see Enabling Remote Power Management, page 21-4.
details, see Enabling Remote Power Management, page 21-4.