Cisco Cisco Web Security Appliance S670
18
Release Notes for Cisco IronPort AsyncOS 7.5.0 for Web
Resolved Issues
85730
Fixed: Multiple HTTPS passthrough requests cause the WSA to run out of free
memory resources, causing users to be unable to use the web
memory resources, causing users to be unable to use the web
This issue could also cause the proxy to restart or core.
Previously, this occurred because these connections were kept open even when no
data was passing through them. This no longer occurs.
data was passing through them. This no longer occurs.
86307
Fixed: Decreased performance when Safe Search and Content Rating are
enabled in the Global Policy on a WSA with a complex configuration
enabled in the Global Policy on a WSA with a complex configuration
Performance no longer degrades when Safe Search and Content Rating are enabled in
the Global Policy.
the Global Policy.
86797
Fixed: Use of FTP over HTTP in FireFox and Internet Explorer browsers results
in the display of an incorrect directory listing.
in the display of an incorrect directory listing.
Previously, the use of FTP over HTTP in FireFox and Internet Explorer browsers
resulted in the display of an incorrect directory listing. The directory listing now
displays correctly.
resulted in the display of an incorrect directory listing. The directory listing now
displays correctly.
86906
Fixed: Delayed response to HTTP HEAD requests causes the appliance to appear
as offline
as offline
The appliance now responds immediately, avoiding the unexpected offline
appearance.
appearance.
86968
Fixed: FTP over HTTP CONNECT fails while connecting to FTP sites using
MLSD
MLSD
Connections to FTP sites using MLSD are now successful.
87371
Fixed: The WSA trusts some intermediate Certificate Authority certificates
revoked by Microsoft in June 2012
revoked by Microsoft in June 2012
The compromised intermediate certificates have been added to the proxy certificate
blacklist and connections using those certificates are blocked.
blacklist and connections using those certificates are blocked.
88082
Fixed: Appliance producing core files characterized by XFF invalid entries in the
proxy logs.
proxy logs.
Previously, the appliance was producing core files. These core files were
characterized by XFF invalid entries in the proxy logs. This is fixed.
characterized by XFF invalid entries in the proxy logs. This is fixed.
88822
Fixed: Cannot revert after upgrade.
Previously, customers who upgraded to version 7.5.0 were unable to revert to an older
version. Now customers can revert to older versions after upgrade.
version. Now customers can revert to older versions after upgrade.
73867
Fixed: WSA incorrectly resets the connection to the Management HTTP port is
unexpectedly reset if the same port is being used for Data traffic in split mode
unexpectedly reset if the same port is being used for Data traffic in split mode
You can now use the same port (i.e. 80) for the Management HTTP port and for
proxying traffic on Data interface.
proxying traffic on Data interface.
Table 3
Resolved Issues in AsyncOS 7.5.0 for Web (continued)
Defect ID
Description