Cisco Cisco Web Security Appliance S690

The following new features and enhancements have been added in this release.

High Availability 

This release provides a built-in high availability option suitable for 
deployments in which the appliance runs in explicit mode with a proxy. 

For more information, see the “Connect, Install, and Configure” chapterin 
the User Guide.

2048-bit certificates

The key length for SSL certificates generated or processed by the appliance 
is now 2048 bits. 

LDAP authentication

LDAP protocol is now supported for authenticating administrative users of 
the appliance. 

Volume and Time Quotas You can apply time and volume quotas to access policies and decryption 

policies. Quotas allow individual users to continue accessing an Internet 
resource (or a class of Internet resources) until they exhaust the data volume 
or time limit imposed.

Web Security Virtual 
Appliance enhancements

Support for thin provisioning 

Support for ESXi 5.5 

Now, after the virtual appliance license expires, there is a six-month 
grace period during which the appliance continues to process web 
transactions, but without security services 

You can configure the appliance to send you alerts when the license 
expiration date approaches. 

Evaluation feature keys can now be deployed on virtual appliances 

Authentication by 
machine ID 

For deployments in Connector mode with Active Directory, this release 
introduces the option to authorize access based on device ID. 

Advanced Malware 
Protection enhancements

Advanced Malware Protection can now detect malware in archived or 
compressed files.

You can now select the interface used to communicate with an AMP 
server.

File analysis now supports analysis of additional file types. Supported 
file types are determined by the cloud service and can change at any 
time. 

When you configure the File Analysis feature, you can choose which 
file types to send for analysis, and you can choose to receive alerts 
when the options change. 

For more information, see “Which Files Can Have their Reputation 
Evaluated and Be Sent for Analysis?” in the Release Notes, and the 
chapter “File Reputation and File Analysis” in the on-line help or User 
Guide for information about supported file types and alerts. 

AAA Audit logging

AsyncOS is enhanced to standardize AAA-related logging across multiple 
logs, and to centralize them into a central log subscription. This new log 
subscription will be exportable via syslog.