Cisco Cisco Email Security Appliance C670
3
Release Notes for Cisco AsyncOS 8.5.6 for Email
What’s New
Custom DLP
Policy-Related
Changes
Policy-Related
Changes
While creating custom DLP policies, you cannot select any of the following
predefined RSA content matching classifiers that require additional
customizations:
predefined RSA content matching classifiers that require additional
customizations:
•
Group Insurance Numbers
•
Health Plan Beneficiary Numbers
•
Mergers and Acquisitions Codenames
•
Patient Identification Numbers
•
Custom Accounts
•
US Personal Identification Information
•
Medical Record Numbers
•
Confidential Documents
•
Student Identification Numbers
•
US Bank Account Numbers
Note
If you have an existing custom DLP policy with these classifiers, they
are removed from the policy after the upgrade to AsyncOS 8.5.6 for
Email.
are removed from the policy after the upgrade to AsyncOS 8.5.6 for
Email.
DLP Policy-Related
Changes
Changes
After upgrading to Cisco AsyncOS 8.5.6 for Email, DLP policies without any
content blades or any other detection logic are disabled, and are not used for
DLP scanning.
content blades or any other detection logic are disabled, and are not used for
DLP scanning.
Default IP Interface
AsyncOS selects the default IP interface based on the order in which the IP
interfaces appear under Network > IP Interfaces page or in the
interfaces appear under Network > IP Interfaces page or in the
ifconfig
CLI command. The first IP interface in the list that resides on the subnet in
question is used.
question is used.
Prior to this release, if there are multiple IP addresses configured within the
same subnet as the default gateway, the IP address with the lowest
alphanumeric value is used.
same subnet as the default gateway, the IP address with the lowest
alphanumeric value is used.
In this release, if there are multiple IP addresses configured within the same
subnet as the default gateway, the IP address with the lowest number is used.
subnet as the default gateway, the IP address with the lowest number is used.
New Alert for Loss of
Connectivity to Cisco
Web Security Services
Connectivity to Cisco
Web Security Services
A new warning alert will be sent if the connectivity to Cisco Web Security
Services is lost.
Services is lost.
Default URL Lookup
Timeout Value
Timeout Value
For faster recovery from an extended connectivity loss to Cisco Web Security
Services, the default value of URL lookup timeout is now five seconds.
Services, the default value of URL lookup timeout is now five seconds.
Note
If you are upgrading from Cisco AsyncOS 8.5.X for Email, the default
value will remain as 15 seconds. It is recommended that you set this
value to five seconds using the
value will remain as 15 seconds. It is recommended that you set this
value to five seconds using the
websecurityadvancedconfig
command in CLI.
URL Filtering Client
Service Process
Recycling
Service Process
Recycling
The URL Filtering Client Service process is now forcefully recycled if the
size of process grows beyond the preconfigured limit.
size of process grows beyond the preconfigured limit.
Feature
Description