Cisco Cisco Email Security Appliance C680 Release Notes

While configuring the global settings for listeners, you can now specify whether to accept or reject 
messages based on the size of the subject. If you specify this parameter, messages having subject size 
within the specified limit will be accepted and any other messages will be rejected. For more 
information, see Cisco AsyncOS for Email User Guide. 

See the following sections before upgrading: 

Hardware appliances: This release is supported only on certain models. See 

. 

Virtual appliances: To ensure that you obtain all of the benefits of this release, see 

Cluster configurations (centralized management): Take action before you upgrade your cluster. 
See 

. 

To ensure a successful upgrade: You must complete some steps before you start the upgrade 
process. For details on these prerequisites, see 

.

Updater 
enhancements

Cisco AsyncOS 9.1 for Email includes the following updater 
enhancements:

Email security appliance can check the validity of the Cisco updater 
server certificate every time the appliance communicates with the 
updater server.

If you are using a non-transparent proxy server, you can add the CA 
certificate used to sign the proxy certificate to the appliance. By doing 
so, the appliance trusts the proxy server communication.

For more information, see Cisco AsyncOS for Email User Guide. 

Option to disable 
SSLv3 for enhanced 
security

For enhanced security, you can disable SSLv3 for the following services:

Updater

URL Filtering

End User Quarantine

LDAP

You can use the 

sslv3config

 command in CLI to disable SSLv3 for the 

above services. For more information, see Cisco AsyncOS for Email User 
Guide.