Cisco Cisco Web Security Appliance S370

90699

CSCzv79153

After uploading a custom root CA, AsyncOS did not recognize the uploaded certificate until the 
web proxy was restarted. This is fixed.

90467

CSCzv69205

AsyncOS was sending incorrect usernames to the FTP server when all of these conditions were 
met:

Authentication configured and enabled in Identities

Native FTP exempted from authentication

Username for FTP connection either included the backslash character (\) or it was used to 
escape a special character in the username.

AsyncOS now provides a third formatting option to fix this defect. 

88970

CSCzv25023

The login banner was failing to appear in the appliance GUI. This is fixed.

87864

CSCzv21851

Decryption failed when connecting to particular sites. This is fixed. 

87643

CSCzv21222

When sending non-SSL traffic over SSL port 443, the web proxy sometimes ran out of memory 
and crashed or restarted. This is fixed. 

87314

CSCzv97159

Users who had previously submitted authentication credentials were later unable to access 
HTTPS websites and were not prompted to authenticate. Conditions:

Decryption enabled

Authentication required 

Transparent redirection

IP session caching

This is fixed. 

86556

CSCzv57040

The Appliance sometimes responded to an HTTPS file upload request with a 504 Gateway 
Timeout. Conditions: 

The HTTPS proxy was enabled

The upload file included this header: "Transfer-encoding: chunked"

This is fixed. 

86549

CSCzv43726

Attempts to generate a Web Tracking report in PDF format resulted in an application fault if the 
report data included very long URLs. This is fixed. 

86529

CSCzv94982

Time zone setting updates updated components unrelated to time zone.Clicking the Update 
Now button in the Time Zone File Updates section of the System Administration > Time 
Settings page updated all components (WBRS, Sophos, etc.), not just the time zone settings. 
This issue also occurred when using the tzupdate command in the CLI. This is fixed.

86394

CSCzv59884

Using the authcache - list command was resulting in an application fault when the username 
included non-ascii characters. This is fixed. 

86109

CSCzv21811

SSH 1 is an obsolete and nonsecular protocol and is no longer an option for SCP push on the 
Log Subscriptions page or in the CLI logconfig command. SSH2 is the default protocol. 

85964

CSCzv91287

Download time for Web Tracking data in CSV format was excessive when specifying a custom 
time range for the report. This is fixed.