Cisco Cisco Web Security Appliance S670 Release Notes

Release Notes for AsyncOS 8.6 for Cisco Web Security Appliances

Documentation Updates

modprobe kvm_intel enable_apicv=N

Restart your virtual appliance.

The Force Reset Option is Not Supported (KVM Deployments)

The Force Reset option in KVM is not supported, especially during startup.

This is the equivalent of pulling the plug on a hardware appliance.

Network Connectivity Works Initially on KVM Deployments, Then Fails

Problem

Network connectivity is lost after previously working.

Solution

This is a KVM issue. See the section on "KVM: Network connectivity works initially, then

fails" in the OpenStack documentation at

http://docs.openstack.org/admin-guide-cloud/content/section_network-troubleshoot.html

Slow Performance, Watchdog Issues, and High CPU Usage on KVM
Deployments

Problem

Appliance performance is slow, watchdog issues occur, and the appliance shows unusually high

CPU usage when running on an Ubuntu virtual machine.

Solution

Install the latest Host OS updates from Ubuntu.

General Troubleshooting for Virtual Appliances Running on Linux Hosts

Problem

Issues with virtual appliances running on KVM deployments may be related to host OS

configuration issues.

Solution

See the troubleshooting section and other information in the Virtualization Deployment and

Administration Guide, available from
https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/pdf/Virtualization_Depl
oyment_and_Administration_Guide/Red_Hat_Enterprise_Linux-7-Virtualization_Deployment_and_A
dministration_Guide-en-US.pdf.

A Proxy is Not Supported for Communications with the File Analysis Server

Using a proxy is not supported for communications between the Web Security appliance and the file
analysis service in the cloud, even if an upstream proxy is transparent to the Web Security appliance and
communications with the File Reputation service use a proxy.