Cisco Cisco Email Security Appliance C170 릴리즈 노트
8
Release Notes for Cisco AsyncOS 8.5 for Email
Installation and Upgrade Notes
Resource Conservation Mode
From AsyncOS 8.5 for Email, Email Security appliance will enter resource conservation mode when the
RAM utilization exceeds 45% and the allowed injection rate is gradually decreased as RAM utilization
approaches 60%. Appliances with large memory utilization, especially with large system quarantine, can
enter resource conservation immediately after upgrading to AsyncOS 8.5 for Email. To avoid this
scenario, make sure that you reduce the system quarantine to a few thousand messages before upgrading.
RAM utilization exceeds 45% and the allowed injection rate is gradually decreased as RAM utilization
approaches 60%. Appliances with large memory utilization, especially with large system quarantine, can
enter resource conservation immediately after upgrading to AsyncOS 8.5 for Email. To avoid this
scenario, make sure that you reduce the system quarantine to a few thousand messages before upgrading.
Upgrading to Cisco AsyncOS 8.5 for Email Release
Before You Begin
Review the
Procedure
Use the following instructions to upgrade your Email Security appliance.
Step 1
Save the XML configuration file off the IronPort appliance.
Step 2
If you are using the Safelist/Blocklist feature, export the Safelist/Blocklist database off the appliance.
Step 3
Suspend all listeners.
Step 4
Wait for the queue to empty.
Step 5
From the System Administration tab, select the System Upgrade page.
Step 6
Click the Available Upgrades button. The page refreshes with a list of available AsyncOS upgrade
versions.
versions.
Step 7
Click the Begin Upgrade button and your upgrade will begin. Answer the questions as they appear.
Step 8
When the upgrade is complete, click the Reboot Now button to reboot your IronPort appliance.
Step 9
Resume all listeners.
Performance Advisory
RSA Email DLP - Enabling RSA Email DLP for outbound traffic on an appliance that is also running
anti-spam and anti-virus scanning on inbound traffic can cause a performance decrease of less than 10%.
Appliances that are only running outbound messages and are not running anti-spam and anti-virus may
experience a significant performance decline.
anti-spam and anti-virus scanning on inbound traffic can cause a performance decrease of less than 10%.
Appliances that are only running outbound messages and are not running anti-spam and anti-virus may
experience a significant performance decline.
DomainKeys - DomainKeys signing outgoing email can cause a decrease in the message throughput
capacity. Using smaller signing keys (512 byte or 768 byte) can mitigate this.
capacity. Using smaller signing keys (512 byte or 768 byte) can mitigate this.
SBNP - SenderBase Network Participation now uses the Context Adaptive Scanning Engine (CASE) to
collect data to power IronPort Information Services. In some configurations customers may experience
a moderate performance decline.
collect data to power IronPort Information Services. In some configurations customers may experience
a moderate performance decline.
Outbreak Filters - Outbreak Filters uses the Context Adaptive Scanning Engine to determine the threat
level of a message and scores messages based on a combination of Adaptive Rules and Outbreak Rules.
In some configurations, you may experience a moderate performance decline.
level of a message and scores messages based on a combination of Adaptive Rules and Outbreak Rules.
In some configurations, you may experience a moderate performance decline.