Table Of Contents
Cisco Content Security and Control Version 6.1.1569.0 Patch Release Notes
About the CSC 6.1.1569.0 Patch
Installing the CSC SSM 6.1.1569.0 Patch
Verifying the Installed Version of the CSC SSM Software
Cisco Product Security Overview
Reporting Security Problems in Cisco Products
Product Alerts and Field Notices
Obtaining Technical Assistance
Cisco Technical Support & Documentation Website
Definitions of Service Request Severity
Obtaining Additional Publications and Information
Cisco Content Security and Control Version 6.1.1569.0 Patch Release Notes
November 2006
Contents
This document contains release information for the Cisco Content Security and Control (CSC) Version 6.1.1569.0 patch release. It includes the following sections:
•
About the CSC 6.1.1569.0 Patch
•
•
•
•
•
•
About the CSC 6.1.1569.0 Patch
The CSC Version 6.1.1569.0 patch contains the following new features:
•
•
•
major software version.minor software version.build number.patch release number
•
•
•
•
See the "Resolved Caveats" section for information about the caveats that have been resolved by this patch.
Installing the CSC SSM 6.1.1569.0 Patch
Install this patch only if you are running CSC SSM version 6.1-b1519 and version 6.1, patch 1. To verify the version of the CSC SSM installed on the device, see the "Verifying the Installed Version of the CSC SSM Software" section.
To upgrade the CSC SSM, perform the following steps:
Step 1
http://tools.cisco.com/RPF/register/register.do
Step 2
a.
b.
Step 3
Step 4
Step 5
Step 6
Step 7
For more information, see Appendix A, "Reimaging and Configuring the CSC SSM Using the CLI," in the Cisco Content Security and Control SSM Administrator Guide.
Verifying the Installed Version of the CSC SSM Software
You can confirm the version of the CSC SSM software, and software components and patches from the ASA 5500 series adaptive security appliance CLI.
Note
To view the version of software installed on the CSC SSM using the CLI, perform the following steps:
Step 1
hostname(config)# session 1Opening command session with slot 1.Connected to slot 1. Escape character sequence is 'CTRL-^X'.login: ciscoPassword:Trend Micro InterScan for Cisco CSC SSM Setup Main Menu---------------------------------------------------------------------1. Network Settings2. Date/Time Settings3. Product Information4. Service Status5. Change Password for Command Line Interface6. Restore Factory Default Settings7. Troubleshooting Tools8. Reset Management Port Access Control List9. Ping10. Exit ...Step 2
The Product Information screen displays the version and build number of each component of the CSC SSM. Installed patches appear below the component list.
Enter a number from [1-10]: 3Product Information---------------------------------------------------------------------Main version 6.1 build 1519Mail component version 5.5 build 1118Web component version 2.1 build 1154Patches:p-6.1-b1519-1 07/10/2006 22:31:14 CSC SSM 6.1 Patch 1Press Enter to continue ...Step 3
The Trend Micro InterScan for Cisco CSC SSM Setup Main Menu appears.
Caveats
This section describes the open and resolved caveats for the CSC SSM 6.1.1569.0 release. To view more information about an open or resolved caveat, use the Bug Toolkit on Cisco.com. If you are a registered Cisco.com user, access the Bug Toolkit on cisco.com at the following website:
http://www.cisco.com/public/support/tac/tools_trouble.shtml
To become a registered Cisco.com user, go to the following website:
http://tools.cisco.com/RPF/register/register.do
For your convenience in locating caveats in the Cisco Bug Toolkit, the caveat titles listed in this section are taken directly from the Bug Toolkit database. These caveat titles are not intended to be read as complete sentences, because the title field length is limited. In the caveat titles, some truncation of wording or punctuation may be necessary to provide the most complete and concise description. The only modifications made to these titles are as follows:
•
•
•
This section includes the following topics:
Open Caveats
Table 1 lists the caveats that are open in Version CSC 6.1.1569.0.
Table 1 Open Caveats
CSCsd05974
TCP flow dropped due to CSC card failed during SSM stress.
CSCsd17818
Yahoo! Finance MarketTracker does not work. For a workaround, see About the CSC 6.1.1569.0 Patch.
CSCsd17889
Nothing seems to happen when downloading infected file from/to webmail.
CSCsd17954
The HTTP proxy connection cannot tunnel through the CSC SSM.
CSCsd18011
FTP file blocking will not work when file unscanned due to cfg.
CSCsd18030
Connections may be interrupted during SSM service failure.
CSCsd18044
Connections may be interrupted during the SSM restarting period.
CSCsd18052
E-mail notification from the CSC SSM is not received.
CSCsd18060
With CSC enabled, large file transfer using HTTP/FTP or Windows Update fail.
CSCsd59143
Modify e-mails sent by Trend CSC-SSM module to include device name, IP.
CSCse12729
The spyware pattern number may appear to be rolled back.
CSCse12745
NRS feature is not working on the CSC SSM after registration.
CSCse12755
Some spyware may be detected even if Spyware category is not enabled.
CSCse12767
Fails to convert non-UTF8 Japanese characters to UTF-8.
CSCse12772
Filename may not be properly displayed in the e-mail inline insertion.
CSCse12781
Japanese strings may not be displayed correctly in system log messages.
CSCse12784
Multi-byte strings are not allowed on the GUI.
CSCse12786
Original e-mail may break if not encoded in UTF-8.
CSCse12791
Multi-byte filename may not be displayed correctly.
CSCse89728
Number of licensed seats shows a different value for Base and Plus licenses.
CSCsf05298
Citrix not supported with CSC module.
CSCsf12514
CSC module needs to support TFTP blocksize option - RFC 2347, RFC 2348.
CSCsf26197
CSC software blocks Ameritrade streamer.
CSCsf27606
CSC software stops processing POP3 traffic.
CSCsf28591
CSC module generates compact Flash almost-full messages.
CSCsf98493
VPN users using proxy have problem browsing via HTTP: 1264.
CSCsf98538
White IP List on NRS will disappear from Trend UI: 1253.
CSCsg25501
Bypass filter for CSC module.
CSCsg28389
HTTP scanner causes system to hit 100% busy.
CSCsg52819
CSC module - Import function for user-defined domain lists
CSCsg72210
Trend URL filtering service does not currently support SOCKS-based proxy service.
CSCsg76794
Last 30-day counter is not updating correctly.
CSCsg82181
Flash image on www.cisco.com home page sometimes cannot be loaded.
Resolved Caveats
Table 2 lists the caveats that have been resolved in Version CSC 6.1.1569.0.
Related Documentation
For additional information, see the ASDM online Help or the following documentation found on Cisco.com:
•
•
•
•
•
•
•
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. This section explains the product documentation resources that Cisco offers.
Cisco.com
You can access the most current Cisco documentation at this URL:
http://www.cisco.com/techsupport
You can access the Cisco website at this URL:
You can access international Cisco websites at this URL:
http://www.cisco.com/public/countries_languages.shtml
Product Documentation DVD
The Product Documentation DVD is a library of technical product documentation on a portable medium. The DVD enables you to access installation, configuration, and command guides for Cisco hardware and software products. With the DVD, you have access to the HTML documentation and some of the PDF files found on the Cisco website at this URL:
http://www.cisco.com/univercd/home/home.htm
The Product Documentation DVD is created and released regularly. DVDs are available singly or by subscription. Registered Cisco.com users can order a Product Documentation DVD (product number DOC-DOCDVD= or DOC-DOCDVD=SUB) from Cisco Marketplace at the Product Documentation Store at this URL:
http://www.cisco.com/go/marketplace/docstore
Ordering Documentation
You must be a registered Cisco.com user to access Cisco Marketplace. Registered users may order Cisco documentation at the Product Documentation Store at this URL:
http://www.cisco.com/go/marketplace/docstore
If you do not have a user ID or password, you can register at this URL:
http://tools.cisco.com/RPF/register/register.do
Documentation Feedback
You can provide feedback about Cisco technical documentation on the Cisco Technical Support & Documentation site area by entering your comments in the feedback form available in every online document.
Cisco Product Security Overview
Cisco provides a free online Security Vulnerability Policy portal at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
From this site, you will find information about how to do the following:
•
•
•
A current list of security advisories, security notices, and security responses for Cisco products is available at this URL:
To see security advisories, security notices, and security responses as they are updated in real time, you can subscribe to the Product Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed. Information about how to subscribe to the PSIRT RSS feed is found at this URL:
http://www.cisco.com/en/US/products/products_psirt_rss_feed.html
Reporting Security Problems in Cisco Products
Cisco is committed to delivering secure products. We test our products internally before we release them, and we strive to correct all vulnerabilities quickly. If you think that you have identified a vulnerability in a Cisco product, contact PSIRT:
•
An emergency is either a condition in which a system is under active attack or a condition for which a severe and urgent security vulnerability should be reported. All other conditions are considered nonemergencies.
•
In an emergency, you can also reach PSIRT by telephone:
•
•
Tip
Never use a revoked encryption key or an expired encryption key. The correct public key to use in your correspondence with PSIRT is the one linked in the Contact Summary section of the Security Vulnerability Policy page at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
The link on this page has the current PGP key ID in use.
If you do not have or use PGP, contact PSIRT to find other means of encrypting the data before sending any sensitive material.
Product Alerts and Field Notices
Modifications to or updates about Cisco products are announced in Cisco Product Alerts and Cisco Field Notices. You can receive these announcements by using the Product Alert Tool on Cisco.com. This tool enables you to create a profile and choose those products for which you want to receive information.
To access the Product Alert Tool, you must be a registered Cisco.com user. (To register as a Cisco.com user, go to this URL: http://tools.cisco.com/RPF/register/register.do). Registered users can access the tool at this URL: http://tools.cisco.com/Support/PAT/do/ViewMyProfiles.do?local=en.
Obtaining Technical Assistance
Cisco Technical Support provides 24-hour-a-day award-winning technical assistance. The Cisco Technical Support & Documentation website on Cisco.com features extensive online support resources. In addition, if you have a valid Cisco service contract, Cisco Technical Assistance Center (TAC) engineers provide telephone support. If you do not have a valid Cisco service contract, contact your reseller.
Cisco Technical Support & Documentation Website
The Cisco Technical Support & Documentation website provides online documents and tools for troubleshooting and resolving technical issues with Cisco products and technologies. The website is available 24 hours a day at this URL:
http://www.cisco.com/techsupport
Access to all tools on the Cisco Technical Support & Documentation website requires a Cisco.com user ID and password. If you have a valid service contract but do not have a user ID or password, you can register at this URL:
http://tools.cisco.com/RPF/register/register.do
Note
Tip
If you suspect that the browser is not refreshing a web page, force the browser to update the web page by holding down the Ctrl key while pressing F5.
To find technical information, narrow your search to look in technical documentation, not the entire Cisco.com website. On the Cisco.com home page, click the Advanced Search link under the Search box and then click the Technical Support & Documentation radio button.
To provide feedback about the Cisco.com website or a particular technical document, click Contacts & Feedback at the top of any Cisco.com web page.
Submitting a Service Request
Using the online TAC Service Request Tool is the fastest way to open S3 and S4 service requests. (S3 and S4 service requests are those in which your network is minimally impaired or for which you require product information.) After you describe your situation, the TAC Service Request Tool provides recommended solutions. If your issue is not resolved using the recommended resources, your service request is assigned to a Cisco engineer. The TAC Service Request Tool is located at this URL:
http://www.cisco.com/techsupport/servicerequest
For S1 or S2 service requests, or if you do not have Internet access, contact the Cisco TAC by telephone. (S1 or S2 service requests are those in which your production network is down or severely degraded.) Cisco engineers are assigned immediately to S1 and S2 service requests to help keep your business operations running smoothly.
To open a service request by telephone, use one of the following numbers:
Asia-Pacific: +61 2 8446 7411
Australia: 1 800 805 227
EMEA: +32 2 704 55 55
USA: 1 800 553 2447For a complete list of Cisco TAC contacts, go to this URL:
http://www.cisco.com/techsupport/contacts
Definitions of Service Request Severity
To ensure that all service requests are reported in a standard format, Cisco has established severity definitions.
Severity 1 (S1)—An existing network is "down" or there is a critical impact to your business operations. You and Cisco will commit all necessary resources around the clock to resolve the situation.
Severity 2 (S2)—Operation of an existing network is severely degraded, or significant aspects of your business operations are negatively affected by inadequate performance of Cisco products. You and Cisco will commit full-time resources during normal business hours to resolve the situation.
Severity 3 (S3)—Operational performance of the network is impaired while most business operations remain functional. You and Cisco will commit resources during normal business hours to restore service to satisfactory levels.
Severity 4 (S4)—You require information or assistance with Cisco product capabilities, installation, or configuration. There is little or no effect on your business operations.
Obtaining Additional Publications and Information
Information about Cisco products, technologies, and network solutions is available from various online and printed sources.
•
http://www.cisco.com/offer/subscribe
•
•
http://www.cisco.com/go/marketplace/
•
•
•
http://www.cisco.com/en/US/products/index.html
•
http://www.cisco.com/discuss/networking
•
http://www.cisco.com/univercd/cc/td/doc/abtunicd/136957.htm
•
http://www.cisco.com/en/US/learning/index.html
Guest
