Cisco Secure Web Appliance S196, S396, S696, and S696F Hardware Installation Guide

Features

The Cisco Secure Web Appliance includes the S196, S396, S696, and S696F. It helps organizations secure and control web traffic.

The Secure Web Appliance S196, S396, S696, and S696F support Cisco AsyncOS version 15.2 and later. See Product ID (PID) Numbers for a list of field-replaceable product IDs (PIDs) associated with the Secure Web Appliance.

The following figures show the Cisco Secure Web Appliance series.

Figure 1. Cisco Secure Web Appliance S196 and S396

Figure 2. Cisco Secure Web Appliance S696 and S696F

The following table lists the features of the Secure Web Appliance S196, S396, S696, and S696F.

Table 1. Secure Web Appliance S196, S396, S696, and S696F Features

Feature

S196

S396

S696

S696F

Form factor

1 RU

2 RU

Rack mount

Standard 19-inch (48.3 cm) 4-post EIA rack

Airflow

Front to rear

Cold aisle to hot aisle

Pullout asset card

Displays the serial number

Grounding holes

Two threaded holes for dual-hole grounding lug

Use is optional; the supported AC power supplies have internal grounding, so no additional chassis grounding is required.

Locking faceplate

Optional

Unit identification button

On front panel

Power button

On front panel

Memory

16-GB RAM

64-GB RAM

128-GB RAM

RDIMMs

Internal component only; not field-replaceable

One 16-GB SRx4 3200-MHz DIMM (8 Gb)

Two 32-GB SRx4 3200-MHz DIMM (16 Gb)

Four 32-GB DRx4 3200-MHz DIMM (8 Gb)

Management ports

One (M1)

M2 is not supported.

Proxy ports

Two (P1 and P2)

Traffic ports

Two (T1 and T2)

Remote power cycling (RPC)

Accessed through the 1-Gb dedicated port

USB ports

Two USB 3.0 Type A

SFP+ ports

No

Six fiber optic

Supported SFP+

Note

Copper SFPs are not supported.

—

SFP-10G-SR (10 Gb)

Note

SFP-10G-SR has been qualified by Cisco. Use only Cisco-qualified SFPs. We recommend you use SFP-10G-SR in the secure web appliance interface and the corresponding switch interface.

Serial console port

One 1-Gb RJ45 serial port running RS-232 (RS-232D TIA-561)

AC power supply

Note

Do not mix power supply type or wattage between models.

Two

1050 W AC

Hot-swappable and redundant as 1+1

Fans

Six fans for front-to-rear cooling

Internal component only; not field-replaceable. If one fan fails, you must send your chassis for return material authorization (RMA).

Storage

Two 1.2-TB SAS HDDs

RAID 1, hot-swappable

Four 1.2-TB SAS HDDs

RAID 10, hot-swappable

Ten 1.2-TB SAS HDDs

RAID 10, hot-swappable

Package Contents

The following figure shows the package contents for the Secure Web Appliance S196, S396, S696, and S696F. Note that the contents are subject to change and your exact contents might contain additional or fewer items.

1

Chassis

2

Cisco rail kit (Cisco part number 800-43376-02)

3

Cisco Secure Web Appliance S196, S396, S696, S696F

This document contains URLs that point to the hardware installation guide, regulatory compliance and safety information guide, the getting started guide, and a QR code that points to the secure web appliance Documentation Portal.

4

Two 10-Gb SFP+ fiber optic transceivers with cables

Note

Supported on the S696F. You cannot mix SFP transceiver types in the same chassis. 1-Gb SFPs are not supported on the S696F.

Serial Number Locations

The Serial Number (SN) and the Media Access Control (MAC) address for the Secure Web Appliance S196, S396, S696, and S696F are printed on the top of the pullout asset card located on the front panel as shown in the following figure of the Secure Web Appliance S196. The PID (Product ID) and VID (Version ID) are printed on the back of the pullout asset card.

Figure 4. Serial Number on Pullout Asset Card


1	Front of the pullout asset tag with the SN and MAC address	2	Bottom of the pullout asset tag with the PID and VID numbers

The serial number is also on the label on the cover of the chassis as shown in the following figure.

Caution

The cover latch on the top of the chassis cover is not supported. There are no internal field-replaceable parts in the Secure Web Appliance S196, S396, S696, and S696F.

Figure 5. Serial Number Location on Cover

1

Chassis compliance labels with the SN, MAC address, etc. and a QR code that points to the Documentation Portal

Note

Scan the QR code to go to the Documentation Portal, which has links to the product page, hardware installation guide, the regulatory and compliance guide, and the getting started guide.

2

Cover latch

Not supported

Front Panel

The following figure shows the front panel features and disk-drive configuration for the Secure Web Appliance S196. See Front Panel LEDs for a description of the LEDs.


1	Drive bays Supports two 1.2-TB SAS HDDs in slots 1 and 2	2	Power button/power status LED
3	Unit identification button/LED	4	System status LED
5	Power supply status LED	6	Fan status LED
7	Network link activity LED	8	Temperature status LED
9	Pullout asset card		—

The following figure shows the front panel features and disk-drive configuration for the Secure Web Appliance S396. See Front Panel LEDs for a description of the LEDs.

Figure 7. Secure Web Appliance S396 Front Panel


1	Drive bays Supports four 1.2-TB SAS HDDs in slots 1 through 4	2	Power button/power status LED
3	Unit identification button/LED	4	System status LED
5	Power supply status LED	6	Fan status LED
7	Network link activity LED	8	Temperature status LED
9	Pullout asset card		—

The following figure shows the front panel features and disk-drive configuration for the Secure Web Appliance S695 and S695F. See Front Panel LEDs for a description of the LEDs.

Figure 8. Secure Web Appliance S696 and S696F Front Panel


1	Drive bays Supports ten 1.2-TB SAS HDDs in slots 1 through 10	2	Power button/power status LED
3	Unit identification button/LED	4	System status LED
5	Fan status LED	6	Temperature status LED
7	Power supply status LED	8	Network link activity LED
9	Pullout asset card		—

Front Panel LEDs

The following figure shows the front panel LEDs for the Secure Web Appliance S196, S396, S696, and S696F, and describes their states.


1	Drive fault LED: Off—The drive is operating properly. Amber—Drive fault detected. Amber, flashing—The drive is rebuilding. Amber, flashing with 1-second interval—Drive locate function activated in the software.	2	Drive activity LED: Off—There is no drive in the drive tray (no access, no fault). Green—The drive is ready. Green, flashing—The drive is reading or writing data.
3	Power LED: Off—There is no AC power to the chassis. Amber—The chassis is in standby mode. Green—The chassis is in main power mode. Power is supplied to all components.	4	Unit identification LED: Off—The unit identification function is not in use. Blue, flashing—The unit identification function is activated.
5	System status LED: Green—The chassis is running in normal operating condition. Green, flashing—The chassis is performing system initialization and memory check. Amber—The chassis is in a degraded operational state (minor fault). Power supply redundancy is lost. CPUs are mismatched. At least one CPU is faulty. At least one DIMM is faulty. At least one drive in a RAID configuration failed. Amber, 2 flashes—There is a major fault with the system board. Amber, 3 flashes—There is a major fault with the DIMMs. Amber, 4 flashes—There is a major fault with the CPUs.	6	Power supply status LED: Green—All power supplies are operating normally. Amber—One or more power supplies are in a degraded operational state. Amber, flashing—One or more power supplies are in a critical fault state.
7	Fan status LED: Green—All fans are operating properly. Amber, flashing—One or more fans breached the nonrecoverable threshold.	8	Network link activity LED: Off—The Ethernet port link is idle. Green—One or more Ethernet ports are link-active, but there is no activity. Green, flashing—One or more Ethernet ports are link-active with activity.
9	Temperature status LED: Green—The chassis is operating at normal temperature. Amber—One or more temperature sensors breached the critical threshold. Amber, flashing—One or more temperature sensors breached the nonrecoverable threshold.		—

Rear Panel

The following figure shows the rear panel of the Secure Web Appliance S196 and S396. See Rear Panel LEDs for a description of the LEDs.

1

Proxy port 1 (P1)

Connects to the network for both incoming and outgoing traffic.

2

Proxy port 2 (P2)

When P1 and P2 are both enabled, you must connect P1 to the internal network and P2 to the internet.

Note

You can connect P1 and P2 to an L4 switch, WCCP router, or network switch.

3

Traffic monitor port 1 (T1)

Use for Duplex Ethernet tap; one cable for all incoming and outgoing traffic.

4

Traffic monitor port 2 (T2)

Use for Simplex Ethernet tap; one cable connected to T1 for all packets going to the internet. and one cable connected to T2 for all packets coming from the internet.

5

1050-W AC power supply (PSU 2)

6

1050-W AC power supply (PSU 1)

7

Threaded holes for dual-hole grounding lug

Use is optional. The supported AC power supplies have internal grounding, so no additional chassis grounding is required.

8

Unit identification button

9

USB 3.0 Type A (USB 2)

10

USB 3.0 Type A (USB 1)

11

Management interface (M1)

Restricted to management use only

12

Management interface (M2)

Not in use

13

RPC port (RPC)

Used for remote power cycling

14

Serial console port (Console)

RJ-45 connector that directly connects a management computer to the appliance.

15

VGA video port (DB-15 connector)

Not supported

—

The following figure shows the rear panel of the Secure Web Appliance S696. See Rear Panel LEDs for a description of the LEDs.

Figure 11. Secure Web Appliance S696 Rear Panel

1

Proxy port 1 (P1)

Connects to the network for both incoming and outgoing traffic.

2

Proxy port 2 (P2)

When P1 and P2 are both enabled, you must connect P1 to the internal network and P2 to the internet.

Note

You can connect P1 and P2 to an L4 switch, WCCP router, or network switch.

3

Traffic monitor port 1 (T1)

Use for Duplex Ethernet tap; one cable for all incoming and outgoing traffic.

4

Traffic monitor port 2 (T2)

Use for Simplex Ethernet tap; one cable connected to T1 for all packets going to the internet. and one cable connected to T2 for all packets coming from the internet.

5

USB 3.0 Type A (USB 1)

6

USB 3.0 Type A (USB 2)

7

Threaded holes for dual-hole grounding lug

Use is optional. The supported AC power supplies have internal grounding, so no additional chassis grounding is required.

8

Management interface 1 (MGMT 1)

Restricted to management use only

9

Management interface 2 (MGMT 2)

Not supported

10

RPC port (RPC)

Used for remote power cycling

11

Serial console port

RJ-45 connector that directly connects a management computer to the appliance.

12

VGA video port (DB-15 connector)

Not supported

13

Unit identification button

14

1050-W AC power supply (PSU 1)

15

1050-W AC power supply (PSU 2)

—

The following figure shows the rear panel of the Secure Web Appliance S696F. See Rear Panel LEDs for a description of the LEDs.

Figure 12. Secure Web Appliance S696F Rear Panel

1

Management interface 1 (MGMT 1)

Restricted to management use only

10-Gigabit Ethernet SFP+ support

Note

The SFP-10G-SR (10 Gb) is the only SFP+ transceiver qualified by Cisco. Use only Cisco-qualified SFPs.

Note

Copper SFPs are not supported.

2

Management interface 2 (MGMT 2)

Not in use

Caution

Do not install any SFPs into this interface.

3

Threaded holes for dual-hole grounding lug

Use is optional; the supported AC power supplies have internal grounding, so no additional chassis grounding is required.

4

Proxy port 1 (P1)

Connects to the network for both incoming and outgoing traffic.

The SFP-10G-SR (10 Gb) is the only SFP+ transceiver qualified by Cisco. Use only Cisco-qualified SFPs.

Note

Copper SFPs are not supported.

5

Proxy port 2 (P2)

When P1 and P2 are both enabled, you must connect P1 to the internal network and P2 to the internet.

Note

You can connect P1 and P2 to an L4 switch, WCCP router, or network switch.

10-Gigabit Ethernet SFP+ support

The SFP-10G-SR (10 Gb) is the only SFP+ transceiver qualified by Cisco. Use only Cisco-qualified SFPs.

Note

Copper SFPs are not supported.

6

Traffic monitor port 1 (T1)

Use for Duplex Ethernet tap; one cable for all incoming and outgoing traffic.

10-Gigabit Ethernet SFP+ support

Note

The SFP-10G-SR (10 Gb) is the only SFP+ transceiver qualified by Cisco. Use only Cisco-qualified SFPs.

Note

Copper SFPs are not supported.

7

Traffic monitor port 2 (T2)

Use for Simplex Ethernet tap; one cable connected to T1 for all packets going to the internet. and one cable connected to T2 for all packets coming from the internet.

10-Gigabit Ethernet SFP+ support

Note

The SFP-10G-SR (10 Gb) is the only SFP+ transceiver qualified by Cisco. Use only Cisco-qualified SFPs.

Note

Copper SFPs are not supported.

8

USB 3.0 Type A (USB 1)

9

USB 3.0 Type A (USB 2)

10

Data interface (DATA 1)

Not supported

11

Data interface (DATA 2)

Not supported

12

RPC port (RPC)

Used for remote power cycling

13

Serial console port (Console)

RJ-45 connector that directly connects a management computer to the appliance.

14

VGA video port (DB-15 connector)

Not supported

15

Unit identification button

16

1050-W AC power supply (PSU 1)

17

1050-W AC power supply (PSU 2)

—

Rear Panel LEDs

The following figure shows the rear panel LEDs of the Secure Web Appliance S196 and describes their states. The Secure Web Appliance S396 is the same except it has two power supplies. The Secure Web Appliance S696 and S696F have the same LEDs except that these models have more data interfaces; the speed and status LED descriptions are the same.


1	Data interface link speed: Off—Link speed is 100 Mbps. Amber—Link speed is 1 Gbps. Green—Link speed is 10 Gbps.	2	Data interface link status: Off—No link is present. Green—Link is active. Green, flashing—Traffic is present on the active link.
3	Data interface link speed: Off—Link speed is 100 Mbps. Amber—Link speed is 1 Gbps. Green—Link speed is 10 Gbps.	4	Data interface link status: Off—No link is present. Green—Link is active. Green, flashing—Traffic is present on the active link.
5	Rear unit identification: Off—The unit identification function is not in use. Blue, flashing—The unit identification function is activated.	6	Management interface link speed: Off—Link speed is 100 Mbps. Amber—Link speed is 1 Gbps. Green—Link speed is 10 Gbps.
7	Management interface link status: Off—No link is present. Green—Link is active. Green, flashing—Traffic is present on the active link.	4	Management interface link speed: Off—Link speed is 100 Mbps. Amber—Link speed is 1 Gbps. Green—Link speed is 10 Gbps.
5	Management interface link status: Off—No link is present. Green—Link is active. Green, flashing—Traffic is present on the active link.	6	Power supply: Off—No AC input (12-V main power off; 12-V standby power off) Green, flashing—12-V main power off; 12-V standby power on. Green—12-V main power on; 12-V standby power on. Amber, flashing—Warning threshold detected but 12-V main power on. Amber—Critical error detected; 12-V main power off ( for example, overcurrent, overvoltage, or overtemperature failure).

Power Supply

The power supply is hot-swappable. The Secure Web Appliance ships with two power supplies thus providing redundancy.

Note

Make sure that one power supply is always active.

The following table lists the specifications for the 1050-W AC power supply (Cisco part number 341-0638-03).

Table 2. 1050-W Power Supply Specifications
Description	Specification
AC input voltage range	Nominal range: 100 to 120 V AC, 200 to 240 V AC Range: 90–132 V AC, 180–264 V AC
AC input frequency	Nominal range: 50–60 Hz Range: 47–63 Hz
Maximum AC input current	12.5 A peak at 100 V AC 6.0 A peak at 208 V AC
Maximum input volt amperes	1250 VA at 100 V AC
Maximum output power for each power supply	1050 W
Maximum inrush current	15 A (subcycle duration)
Maximum hold-up time	12 ms at 1050 W
Power supply output voltage	12 V DC
Power supply standby voltage	12 V DC
Efficiency rating	Climate Savers Platinum Efficiency (80 Plus Platinum certified)
Form factor	RSP2
Input connector	IEC320 C14

Hardware Specifications

The following table lists the hardware specifications for the Secure Web Appliance S196, S396, S696, and S696F.

Table 3. S196, S396, S696, and S696F Hardware Specifications
Specification	S196	S396	S696	S696F
Weight	31 lb (14.06 kg)	33.5 lb (15.19 kg)	30.8 lb (13.97 kg)	52.2 lb (23.68 kg)
Dimensions (H x W x D)	1.7 x 16.89 x 29.8 inches (4.32 x 43.0 x 75.6 cm)		3.4 x 16.9 x 29.5 inches (8.64 x 42.92 x 74.93 cm)
Temperature	Operating: 41 to 95°F (5 to 35°C) Derate the maximum temperature by 1°C for every 1000 ft (305 m) of altitude above sea level. Nonoperating: –40 to 149°F (–40 to 65°C) When stored or transported
Relative humidity	Operating: 10 to 90% noncondensing Nonoperating: 5 to 93% noncondensing
Altitude	Operating: 0 to 10,000 ft Nonoperating: 0 to 40,000 ft When stored or transported
Sound power level	5.5 Bels (measure A-weighted per ISO7779 LWAd) Operation at 73°F (23°C)
Sound pressure level	40 dBa (measure A-weighted per ISO7779 LpAM) Operation at 73°F (23°C)

Product ID (PID) Numbers

The following table lists the PIDs associated with Secure Web Appliance S196, S396, S696, and S696F. The spare components are ones that you can order and replace yourself. If any internal components fail, you must get an RMA for the entire chassis including the SFPs and SFP cables. Remove the drives and power supplies before you send the chassis for RMA. See the Cisco Returns Portal for more information.

Table 4. S196, S396, S696, and S696F PIDs
PID	Description
WSA-S196-K9	Cisco Secure Web Appliance S196 chassis 1 RU
WSA-S396-K9	Cisco Secure Web Appliance S396 chassis 1 RU
WSA-S696-K9	Cisco Secure Web Appliance S696 chassis 2 RU
WSA-S696F-K9	Cisco Secure Web Appliance S696F chassis 2 RU
UCS-HD12TB10K12N	S196, S396, S696, S696F HDD
UCS-HD12TB10K12N=	S196, S396, S696, S696F HDD (spare)
UCSC-PSU1-1050W	S196, S396, S696, S696F AC power supply
UCSC-PSU1-1050W=	S196, S396, S696, S696F AC power supply (spare)
UCSC-RAIL-M6	S195, S395, S695, S695F rail kit
UCSC-RAIL-M6=	S196, S396, S696, S696F rail kit (spare)
UCSC-BZL-C220M6	S196 and S396 1 RU locking faceplate
UCSC-BZL-C220M6=	S196 and S396 1 RU locking faceplate (spare)
UCSC-BZL-C240M6	S696 and S696F 2 RU locking faceplate
UCSC-BZL-C240M6=	S696 and S696F 2 RU locking faceplate (spare)
SFP-10G-SR	C696F 10-Gb SFP
SFP-10G-SR=	C696F 10-Gb SFP (spare)

Power Cord Specifications

Each power supply has a separate power cord. Standard power cords or jumper power cords are available for connection to the Secure Web Appliance. The jumper power cords for use in racks are available as an optional alternative to the standard power cords.

If you do not order the optional power cord with the system, you are responsible for selecting the appropriate power cord for the product. Using a incompatible power cord with this product may result in electrical safety hazard. Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered with the system.

The following power cords and jumper cords are supported.


1	Plug: IRAM 2073	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C13		—


1	Plug: A.S. 3112-2000	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C15		—


1	Plug: NBR 14136	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C13		—

Figure 17. Cabinet Jumper (CAB-C13-C14-2M)


1	Plug: SS10A	2	Cord set rating: 10A, 250V
3	Connector: HS10S, C-13 to C-14		—

Figure 18. Cabinet Jumper (CAB-C13-C14-AC)


1	Plug: SS10A	2	Cord set rating: 10 A, 250 V
3	Connector: HS10S, C-13 to C-14 (recessed receptacle)		—


1	Plug: SS10A	2	Cord set rating: 10 A, 250 V
3	Connector: HS10S, C-13 to C-14		—


1	Plug: GB2099.1/2008	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C13		—


1	Plug: CEE 7/7 (M2511)	2	Cord set rating: 10 A/16 A, 250 V
3	Connector: IEC 60320/C15 (VSCC 15)		—


1	Plug: IS 6538-1971	2	Cord set rating: 16 A, 250 V
3	Connector: IEC 60320-C13		—


1	Plug: SI-32	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320-C13		—


1	Plug: CEI 23-16/VII (I/3G)	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C15 (EN 60320/C15M)		—


1	Plug: JIS 8303	2	Cord set rating: 12 A, 125 V
3	Connector: IEC 60320/C13		—


1	Plug: EN 60320-2-2/E	2	Cord set rating: 10 A, 250 V
3	Connector: EN 60320/C13 to C14		—


1	Plug: EL211 (KSC 8305)	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C15		—


1	Plug: NEMA5-15P	2	Cord set rating: 13 A, 125 V
3	Connector: IEC 60320/C15		—


1	Plug: NEMA6-15P	2	Cord set rating: 10 A, 125 V
3	Connector: IEC 60320/C13		—

Figure 30. North America (CAB-AC-L620-C13)


1	Plug: NEMA L6-20 (molded twist lock)	2	Cord set rating: 13 A, 250 V
3	Connector: IEC 60320/C13		—


1	Plug: SEV 1011 (MP232-R)	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C15		—


1	Plug: EL 302 (CNS10917)	2	Cord set rating: 10 A, 125 V
3	Connector: IEC 60320/C13		—

Figure 33. United Kingdom (CAB-9K10A-UK)


1	Plug: BS1363A/SS145	2	Cord set rating: 10 A, 250 V
3	Connector: IEC 60320/C15		—

Bias-Free Language

Book Title

Cisco Secure Web Appliance S196, S396, S696, and S696F Hardware Installation Guide

Chapter Title

Overview

Results

Chapter: Overview

Overview

Features

Package Contents

Serial Number Locations

Front Panel

Front Panel LEDs

Rear Panel

Rear Panel LEDs

Power Supply

Hardware Specifications

Product ID (PID) Numbers

Power Cord Specifications

Was this Document Helpful?

Contact Cisco