Field Notice: FN - 64277 - WSA/ESA - Update Necessary for Support of New McAfee 5800 Engine on Cisco Web and Email Security Appliances - Software Upgrade Recommended

Available Languages

Updated:June 19, 2018
Document ID:FN64277

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Notice

THIS FIELD NOTICE IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTY OF MERCHANTABILITY. YOUR USE OF THE INFORMATION ON THE FIELD NOTICE OR MATERIALS LINKED FROM THE FIELD NOTICE IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS FIELD NOTICE AT ANY TIME.

Revision History

Revision Publish Date Comments
1.0
20-Mar-17
Initial Release
10.0
03-Nov-17
Migration to new field notice system
10.1
19-Jun-18
Fixed Broken Image Links

Products Affected

Affected OS Type Affected Release Affected Release Number Comments
NON-IOS
9
9.6.0,9.8.1,9.7.1,9.0.0,9.7.0,9.8.0,9.1.0
NON-IOS
8
8.0.1,8.0.0,8.5.7,8.5.6,8.5.5
NON-IOS
7
7.7.5
NON-IOS
9
9.0.0,9.0.1,9.1.1,9.1.2,9.2.0
NON-IOS
8
8.0.5,8.0.6,8.5.0,8.5.1,8.8.0,8.7.0,8.5.3,8.5.2,8.6.0,8.5.4

Defect Information

Defect ID Headline
CSCvf34445 There were no defects filed with this field notice at the time of publication.

Problem Description

McAfee Anti-Virus/Anti-Malware Engine version 5800 will not function on old AsyncOS versions on Cisco Web Security Appliances (WSAs) and Email Security Appliances (ESAs) - physical as well as virtual. This is due to the new McAfee Engine versions requirement of a 64-bit environment.

Background

The newest McAfee Anti-Virus/Anti-Malware Engine version 5800 requires that you run on a 64-bit environment, which prevents it from functioning on any AsyncOS version that runs in a 32-bit environment, backward compatible mode. As a result, McAfee Engine version 5800 will not install on any of the affected AsyncOS versions, which results in running the older McAfee Engine version 5700.

Impacted Versions

Lists of impacted AsyncOS versions for the WSA and ESA are:

fn64277_om7pm31528234883948.png

fn64277_om7pnt1528234926554.png

Problem Symptom

Cisco WSAs and ESAs that run McAfee Engine 5700 will eventually start to see efficacy drop, because new improved McAfee signatures will be enabled for the new 5800 engine only.

In order to determine which version of AsyncOS is currently installed on your appliance, use the System Overview page from the Monitor menu in the web interface or use the version command in the CLI.

How to Upgrade Software

Upgrade your Cisco WSA to one of these AsyncOS versions:

fn64277_omic081528235095036.png

Upgrade your Cisco ESA to one of these Async OS versions:

fn64277_omic0m1528235125239.png

Important: Email Security C160, C360, and C660 appliance models are not compatible with the AsyncOS versions needed to run the new McAfee Engine version 5800. If you want to resolve this, Cisco advises you to take one of these actions:

  • Contact your Cisco sales representative in regards to the purchase of a newer hardware model
  • Migrate to a Virtual ESA.

A physical to virtual conversion is free of charge and does not require the purchase of new keys.

Workaround/Solution

In order to upgrade your appliance from the CLI, complete these steps:

  1. Enter the upgrade command.
  2. Choose an option for DOWNLOADINSTALL or DOWNLOAD.
  3. Choose the appropriate number associated to the upgrade version desired.
  4. Complete the needed questions in order to save the current configuration and approve the reboot in order to complete the upgrade when prompted.

In order to upgrade your appliance from the GUI, complete these steps:

  1. Choose System Administration > System Upgrade.
  2. Click Upgrade Options.
  3. Choose an option for Download and install or Download Only.
  4. Click and highlight the upgrade version desired.
  5. Choose the appropriate options for Upgrade Preparation.
  6. Click Proceed in order to begin the upgrade and display the progress bar for your monitoring.
  7. Approve the reboot in order to complete the upgrade when prompted.

Refer to the Upgrading AsyncOS section in the user guide for further information on how to upgrade your appliance:

Web Security Appliance User Guides

Email Security Appliance User Guides

For More Information

If you require further assistance, or if you have any further questions regarding this field notice, please contact the Cisco Systems Technical Assistance Center (TAC) by one of the following methods:

Receive Email Notification For New Field Notices

Cisco Notification Service—Set up a profile to receive email updates about reliability, safety, network security, and end-of-sale issues for the Cisco products you specify.

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products