Cisco Cisco Web Security Appliance S670

 lists the issues that were resolved in version 7.1.3 of AsyncOS for Web.

81860, 81874

Fixed: Web Proxy erroneously marks an upstream proxy server as “sick” when 
it responds with a 5xx response in some cases 

Previously, when a client sent a CONNECT request, the Web Proxy erroneously 
marked an upstream proxy server as “sick” when the proxy server responded to the 
Web Proxy with a 5xx response with no Via HTTP header. This no longer occurs. 
Additionally, the Default Proxy Log contains additional information at the DEBUG 
level to help troubleshoot the health of upstream proxy servers. 

81405

Fixed: Cannot modify the DNS time to live (TTL) parameter 

Previously, you could not modify the DNS time to live (TTL) parameter the Web 
Security appliance used. This no longer occurs. You can now modify this value using 
the 

dnsconfig > setup

 CLI command. 

81178

The Web Security appliance has blacklisted additional DigiNotar intermediate 
certificates issued by the State of Netherlands. For more information, see the 
following Cisco PSIRT article:

http://tools.cisco.com/security/center/viewAlert.x?alertId=24031 

82139

Previously, the Web Security appliance trusted intermediate CA certificates issued to 
“Digicert Sdn. Bhd” by Entrust and  GTE CyberTrust. This no longer occurs. The Web 
Security appliance has blacklisted these intermediate certificates. For more 
information, see the following Cisco PSIRT article:

http://tools.cisco.com/security/center/viewAlert.x?alertId=24031 

75098

Previously, in some network conditions the Web Proxy would eventually run out of 
chunk memory resources on the S370 and S670 hardware models and Web Proxy 
performance would slow down. This no longer occurs.