Compatibility Matrix for Cisco Secure Email and Web Manager

Compatibility with Secure Email Gateway

Select Version

Version Compatibility

Export to Excel

[Deprovisioned]* = This version is Deprovisioned. For more information on deprovisioned releases, see the Deprovisioned AsyncOS Releases section.

General Compatibility Information

Each release of the Cisco Secure Email and Web Manager is compatible with several releases of the Cisco Secure Email Gateway. A feature is supported on the Secure Email and Web Manager only when it is supported on the associated Secure Email Gateway.

If an older Secure Email and Web Manager release manages supported newer Email Gateway releases, it generally does not support the new features that are available on those newer-release managed gateways.

The compatibility table assumes that you have the latest build for each version. For example, if 10.1.0-201 is the latest build for version 10.1.0, you should have build 201, not build 107. This applies to Secure Email and Web Manager and associated Email Gateway releases.


Compatibility With Virtual Appliances

The Secure Email and Web Manager does not distinguish between managed gateways that run on physical (hardware) and those that are virtual gateways.


Additional Information

For additional information about your release of AsyncOS for Secure Email and Web Manager, see the Release Notes.

For compatibility information of Cisco Secure Email and Web Manager with Secure Web Appliance, see here.


Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (1110R) Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional and coincidental.

Deprovisioned AsyncOS Releases

Secure Email and Web Manager

Secure Email and Web Manager Version Releases # Defects / Reason for Deprovisioning Recommended Upgrade
16.0 16.0.0-050 (GD) CSCwn05647 - ESAs using SAML can fail to redirect the browser to the IdP after upgrading to 16.0 16.0.0-054 (GD)
14.2 14.2.0-203 (GD) CSCwc65974 - SMA CPQ CA Certificate Expiration
CSCwc56136 - SMA X95 BIOS: C220M5.4.1.1b.0.0 fail to detect cpu frequency, Speed Boost not functional 		14.2.0-224 (MD)
14.2.0-206 (GD)
14.2.0-212 (MD)
14.2.0-217 (MD) 		CSCwd29905 - Cisco Secure Email and Web Manager Privilege Escalation Vulnerability 14.2.0-224 (MD)
14.1 14.1.0-199 (FCS)
14.1.0-227 (GD) 		Consolidation of 14.1 SMA images 14.2.0-224 (MD)
14.1.0-238 (GD)
14.1.0-239 (GD)
14.1.0-250 (MD) 		CSCwc65974 - SMA CPQ CA Certificate Expiration 14.2.0-224 (MD)
14.0 14.0.0-404 (GD)
14.0.0-418 (MD) 		CSCwc65974 - SMA CPQ CA Certificate Expiration 14.2.0-224 (MD)
13.8.1 13.8.1-052 (GD)
13.8.1-048 (LD) 		CSCvx14681 - SMA Privilege Escalation Vulnerability
CSCvx36120 - Purge vulnerable builds after upgrade
CSCvx89673 - Revert list does not show old builds on upgrade from a fixed version to a higher version 		13.8.1-108 (MD)
13.8.1-068 (MD)
13.8.1-074 (GD)
13.8.1-090 (GD)
13.8.1-101 (MD) 		CSCwc65974 - SMA CPQ CA Certificate Expiration 13.8.1-108 (MD)
13.8.1-102 (MD) CSCwd29905 - Cisco Secure Email and Web Manager Privilege Escalation Vulnerability 13.8.1-108 (MD)
13.8.0 13.8.0-344 (LD) CSCvx14681 - SMA Privilege Escalation Vulnerability
CSCvx36120 - Purge vulnerable builds after upgrade
CSCvx89673 - Revert list does not show old builds on upgrade from fixed version to a higher version
13.8.1-108 (MD)
13.6.2 13.6.2-058 (MD)
13.6.2-052 (MD) 		CSCvx14681 - SMA Privilege Escalation Vulnerability
CSCvx36120 - Purge vulnerable builds after upgrade
CSCvx89673 - Revert list does not show old builds on upgrade from fixed version to higher version 		13.8.1-108 (MD)
13.6.2-078 (MD)
13.6.2-090 (MD) 		CSCwc65974 - SMA CPQ CA Certificate Expiration 13.8.1-108 (MD)
13.6.1 13.6.1-201 (GD)
13.6.1-193 (LD) 		CSCvx14681 - SMA Privilege Escalation Vulnerability
CSCvx36120 - Purge vulnerable builds after upgrade
CSCvx89673 - Revert list does not show old builds on upgrade from fixed version to higher version 		13.8.1-108 (MD)
13.6.0 13.6.0-157 (LD)
13.5.0 13.5.0-117 (LD)
13.0.0 13.0.0-249 (GD)
13.0.0-239 (LD Refresh)
13.0.0-187 (LD) 		CSCvx14681 - SMA Privilege Escalation Vulnerability
CSCvx36120 - Purge vulnerable builds after upgrade
CSCvx89673 - Revert list does not show old builds on upgrade from fixed version to higher version 		13.8.1-108 (MD)
13.0.0-277 (GD) CSCwc65974 - SMA CPQ CA Certificate Expiration 13.8.1-108 (MD)
12.8.1 12.8.1-021 (MD) - 13.8.1-108 (MD)
12.8.1-002 (GD) CSCwd29905 - Cisco Secure Email and Web Manager Privilege Escalation Vulnerability 13.8.1-108 (MD)
12.8.0 12.8.0-026 (GD) CSCvx14681 - SMA Privilege Escalation Vulnerability
CSCvx36120 - Purge vulnerable builds after upgrade
CSCvx89673 - Revert list does not show old builds on upgrade from fixed version to higher version 		13.8.1-108 (MD)
12.7.0 12.7.0-007 (LD)
12.5.0 12.5.0-683 (MD)
12.5.0-678 (MD)
12.5.0-670 (MD)
12.5.0-658 (MD)
12.5.0-655 (MD)
12.5.0-643 (MD)
12.5.0-636 (MD)
12.5.0-633 (GD)
12.5.0-613 (LD)
12.0.0 12.0.0-478 (MD)
12.0.0-322 (LD)
11.5.1 11.5.1-115 (MD)
11.5.1-110 (MD)
11.5.1-105 (MD)
11.5.0 11.5.0-065 (LD)
11.5.0-072 (LD Refresh)
11.5.0-075 (GD)
11.5.0-110 (MD)

Secure Email Gateway

Secure Email Gateway Version Releases # Defects / Reason for Deprovisioning
14.3 phoebe-14.3.0-020
(Cloud Release Only) 		CSCwd32022 - Discrepancy in install date and build date post-upgrade of the virtual machine.
14.2 phoebe-14.2.1-015 (MD) CSCwd50043 - Cisco ESA Command Injection Vulnerability.
CSCwd29901 - Cisco ESA Privilege Escalation Vulnerability.
phoebe-14.2.0-616 (GD) CSCwc19351 - GUI: Requested page was not found for ESA GUI Default Page with External Authentication.
phoebe-14.2.0-620 (GD) CSCwd50043 - Cisco ESA Command Injection Vulnerability.
CSCwd29901 - Cisco ESA Privilege Escalation Vulnerability.
14.0.3 phoebe-14.0.3-015 (MD) CSCwd50043 - Cisco ESA Command Injection Vulnerability.
CSCwd29901 - Cisco ESA Privilege Escalation Vulnerability.
14.0.2 phoebe-14.0.2-020 (MD)
phoebe-14.0.2-028 (MD)
phoebe-14.0.2-606 (HP) 		CSCwd50043 - Cisco ESA Command Injection Vulnerability.
CSCwd29901 - Cisco ESA Privilege Escalation Vulnerability.
14.0.1 phoebe-14.0.1-033 (MD) CSCwd50043 - Cisco ESA Command Injection Vulnerability.
CSCwd29901 - Cisco ESA Privilege Escalation Vulnerability.
14.0 phoebe-14.0.0-692 (GD) CSCvy23969 - Unable to upgrade virtual ESAs to 14.0.0-692
CSCvy59938 - Hermes hangs on matching mail policy for large Reply-to header.
phoebe-14.0.0-698 (GD) CSCwd50043 - Cisco ESA Command Injection Vulnerability.
CSCwd29901 - Cisco ESA Privilege Escalation Vulnerability.
13.5.1 phoebe-13.5.1-277 (GD) CSCwd50043 - Cisco ESA Command Injection Vulnerability.
CSCwd29901 - Cisco ESA Privilege Escalation Vulnerability.
13.0 phoebe-13.0.0-392 (GD) CSCwd50043 - Cisco ESA Command Injection Vulnerability.
CSCwd29901 - Cisco ESA Privilege Escalation Vulnerability.
12.5.1 phoebe-12.5.1-031 (MD) CSCvs12559 - Interfaces are not named properly on C695F ESA after upgrade to 12.5.1 or above versions.
CSCvs08808 - C695Fs do not have a copper Data NIC.
12.5.0 phoebe-12.5.0-066 (GD) CSCwd50043 - Cisco ESA Command Injection Vulnerability.
CSCwd29901 - Cisco ESA Privilege Escalation Vulnerability.
12.1 phoebe-12.1.0-071 (GD)
phoebe-12.1.0-087 (GD)
phoebe-12.1.0-089 (GD)		 CSCwd50043 - Cisco ESA Command Injection Vulnerability.
CSCwd29901 - Cisco ESA Privilege Escalation Vulnerability.
12.0 phoebe-12.0.0-419 (GD) CSCwd50043 - Cisco ESA Command Injection Vulnerability.
CSCwd29901 - Cisco ESA Privilege Escalation Vulnerability.