Overview

Features

The Cisco Web Security Appliances (WSA) S195, S395, S695, and S695F help organizations secure and control web traffic.

The WSA S195, S395, S695, and S695F support Cisco AsyncOS version 11.8 and later. See Product ID Numbers for a list of field-replaceable product IDs (PIDs) associated with the WSA security appliances.

The following figures show the Cisco Web Security appliances.

Figure 1. Cisco Web Security S195 and S395
Figure 2. Cisco Web Security S695 and S695F

The following table lists the features of the WSA S195, S395, S695, and S695F.

Table 1. WSA S195, S395, S695, and S695F Features

Feature

S195

S395

S695

S695F

Form factor

1 RU

2 RU

Rack mount

Standard 19-inch (48.3 cm) 4-post EIA rack

Airflow

Front to rear

Cold aisle to hot aisle

Pullout asset card

Displays the serial number

Grounding holes

Two threaded holes for dual-hole grounding lug

Use is optional; the supported AC power supplies have internal grounding, so no additional chassis grounding is required.

Locking faceplate

Optional

Unit identification button

On front panel

Power button

On rear panel

Processor

Before January 2021: One Intel Xeon 4110

After January 2021: One Intel Xeon 4210

Before January 2021: One Intel Xeon 5118

After January 2021: One Intel Xeon 5218

Before January 2021: Two Intel Xeon 6126

After January 2021: Two Intel Xeon 6226

Memory

16-GB RAM

32-GB RAM

64-GB RAM

RDIMMs

Internal component only; not field-replaceable

Before January 2021: One 16-GB DDR4-2400-MHz DIMM

After January 2021: One 16-GB DDR4-2933-MHz DIMM

Before January 2021: Two 16-GB DDR4-2400-MHz DIMM

After January 2021: Two 16-GB DDR4-2933-MHz DIMM

Before January 2021: Four 16-GB DDR4-2400-MHz DIMM

After January 2021: Four 16-GB DDR4-2933-MHz DIMM

Management ports

One (M1)

M2 is not supported.
Proxy ports

Two (P1 and P2)

Traffic ports

Two (T1 and T2)

Remote power cycling (RPC)

Accessed through the 1-Gb dedicated port

USB ports

Two USB 3.0 Type A

SFP+ ports

No

Six fiber optic

Supported SFP+

Note 

These SFPs have been qualified by Cisco. Use only Cisco-qualified SFPs.

Note 

Copper SFPs are not supported.

GLX-SX-MMD (1 Gb) (optional)

SFP-10G-SR (10 Gb) (optional)

Serial console port

One 1-Gb RJ45 serial port running RS-232 (RS-232D TIA-561)

AC power supply

Note 

Do not mix power supply type or wattage between models.

One

770 W AC

You can order a second power supply for redundancy as 1+1.

Two

770 W AC

Hot-swappable and redundant as 1+1

Two

1050 W AC

Hot-swappable and redundant as 1+1

Fans

Six fans for front-to-rear cooling

Internal component only; not field-replaceable. If one fan fails, you must send your chassis for return material authorization (RMA).

Storage

Two 600-GB SAS HDDs

RAID 1, hot-swappable

Four 600-GB SAS HDDs

RAID 10, hot-swappable

Sixteen 600-GB SAS HDDs

RAID 10, hot-swappable

Package Contents

The following figure shows the package contents for the WSA S195, S395, S695, and S695F. Note that the contents are subject to change and your exact contents might contain additional or fewer items.

Figure 3. Package Contents

1

Chassis

2

RJ-45 to DB9-RS232 console cable (Cisco part number 72-3383-XX)

3

Cisco rail kit (Cisco part number 800-43376-02)

4

RJ-45 to RJ-45 Cat 5 Ethernet cable, yellow six feet long (Cisco part number 72-1482-XX)

5

Useful Links document

The steps in the Useful Links document send you to the documentation you need to install, set up, and configure your WSA appliance.

6

Two 1-Gb or 10-Gb SFP+ fiber optic transceivers with cables

Note 

Supported on the S695F. You cannot mix SFP transceiver types in the same chassis. You can either have two 1-Gb or two 10-Gb SFPs in the same chassis.

Serial Number Locations

The serial number (SN) for the WSA S195, S395, S695, and S695F is printed on the pullout asset card located on the front panel as shown in the following figure.

Figure 4. Serial Number on Pullout Asset Card

The serial number is also on the label on the cover of the chassis as shown in the following figure.


Caution

The cover latch on the top of the chassis cover is not supported. There are no internal field-replaceable parts in the WSA S195, S395, S695, and S695F.


Figure 5. Serial Number Location on Cover

1

Serial number label

2

Cover latch

Not supported

Front Panel

The following figure shows the front panel features and disk-drive configuration for the WSA S195. See Front Panel LEDs for a description of the LEDs.

Figure 6. S195 Front Panel

1

Drive bays

Supports two 600-GB SAS HDDs in slots 1 and 2

2

Power button/power status LED

3

Unit identification button/LED

4

System status LED

5

Power supply status LED

6

Fan status LED

7

Network link activity LED

8

Temperature status LED

9

Pullout asset card

The following figure shows the front panel features and disk-drive configuration for the WSA S395. See Front Panel LEDs for a description of the LEDs.

Figure 7. S395 Front Panel

1

Drive bays

Supports four 600-GB SAS HDDs in slots 1 through 4

2

Power button/power status LED

3

Unit identification button/LED

4

System status LED

5

Power supply status LED

6

Fan status LED

7

Network link activity LED

8

Temperature status LED

9

Pullout asset card

The following figure shows the front panel features and disk-drive configuration for the WSA S695 and S695F. See Front Panel LEDs for a description of the LEDs.

Figure 8. S695 and S695F Front Panel Features

1

Drive bays

Supports sixteen 600-GB SAS HDDs in slots 1 through 16

2

Power button/power status LED

3

Unit identification button/LED

4

System status LED

5

Fan status LED

6

Temperature status LED

7

Power supply status LED

8

Network link activity LED

9

Pullout asset card

Front Panel LEDs

The following figure shows the front panel LEDs for the S195, S395, S695, and S695F, and describes their states.

Figure 9. Front Panel LEDs and Their States

1

Drive fault LED:

  • Off—The drive is operating properly.

  • Amber—Drive fault detected.

  • Amber, flashing—The drive is rebuilding.

  • Amber, flashing with 1-second interval—Drive locate function activated in the software.

2

Drive activity LED:

  • Off—There is no drive in the drive tray (no access, no fault).

  • Green—The drive is ready.

  • Green, flashing—The drive is reading or writing data.

3

Power LED:

  • Off—There is no AC power to the chassis.

  • Amber—The chassis is in standby mode.

  • Green—The chassis is in main power mode. Power is supplied to all components.

4

Unit identification LED:

  • Off—The unit identification function is not in use.

  • Blue, flashing—The unit identification function is activated.

5

System status LED:

  • Green—The chassis is running in normal operating condition.

  • Green, flashing—The chassis is performing system initialization and memory check.

  • Amber—The chassis is in a degraded operational state (minor fault).

    • Power supply redundancy is lost.

    • CPUs are mismatched.

    • At least one CPU is faulty.

    • At least one DIMM is faulty.

    • At least one drive in a RAID configuration failed.

  • Amber, 2 flashes—There is a major fault with the system board.

  • Amber, 3 flashes—There is a major fault with the DIMMs.

  • Amber, 4 flashes—There is a major fault with the CPUs.

6

Power supply status LED:

  • Green—All power supplies are operating normally.

  • Amber—One or more power supplies are in a degraded operational state.

  • Amber, flashing—One or more power supplies are in a critical fault state.

7

Fan status LED:

  • Green—All fans are operating properly.

  • Amber, flashing—One or more fans breached the nonrecoverable threshold.

8

Network link activity LED:

  • Off—The Ethernet port link is idle.

  • Green—One or more Ethernet ports are link-active, but there is no activity.

  • Green, flashing—One or more Ethernet ports are link-active with activity.

9

Temperature status LED:

  • Green—The chassis is operating at normal temperature.

  • Amber—One or more temperature sensors breached the critical threshold.

  • Amber, flashing—One or more temperature sensors breached the nonrecoverable threshold.

Rear Panel

The following figure shows the rear panel of the WSA S195 and S395. See Rear Panel LEDs for a description of the LEDs.

Figure 10. S195 and S395 Rear Panel

1

USB 3.0 Type A (USB 1)

2

USB 3.0 Type A (USB 2)

3

Management interface (M1)

Restricted to management use only

4

Management interface (M2)

Not in use

5

RPC port (RPC)

Use for remote power cycling.

6

Serial console port (Console)

RJ-45 connector that directly connects a management computer to the appliance.

7

Unit identification button

8

770-W AC power supply (PSU 1)

9

770-W AC power supply (PSU 2)

The S195 ships with one power supply, but you can order a second one for redundancy. The S395 ships with two power supplies.

10

Threaded holes for dual-hole grounding lug

Use is optional. The supported AC power supplies have internal grounding, so no additional chassis grounding is required.

11

Proxy port 1 (P1)

Connects to the network for both incoming and outgoing traffic.

12

Proxy port 2 (P2)

When P1 and P2 are both enabled, you must connect P1 to the internal network and P2 to the internet.

Note 

You can connect P1 and P2 to an L4 switch, WCCP router, or network switch.

13

Traffic monitor port 1 (T1)

Use for Duplex Ethernet tap; one cable for all incoming and outgoing traffic.

14

Traffic monitor port 2 (T2)

Use for Simplex Ethernet tap; one cable connected to T1 for all packets going to the internet. and one cable connected to T2 for all packets coming from the internet.

15

Riser handle

Not supported

The following figure shows the rear panel of the WSA S695. See Rear Panel LEDs for a description of the LEDs.

Figure 11. S695 Rear Panel

1

Proxy port 1 (P1)

Connects to the network for both incoming and outgoing traffic.

2

Proxy port 2 (P2)

When P1 and P2 are both enabled, you must connect P1 to the internal network and P2 to the internet.

Note 

You can connect P1 and P2 to an L4 switch, WCCP router, or network switch.

3

Traffic monitor port 1 (T1)

Use for Duplex Ethernet tap; one cable for all incoming and outgoing traffic.

4

Traffic monitor port 2 (T2)

Use for Simplex Ethernet tap; one cable connected to T1 for all packets going to the internet. and one cable connected to T2 for all packets coming from the internet.

5

1050-W AC power supply (PSU 1)

6

1050-W AC power supply (PSU 2)

7

Threaded holes for dual-hole grounding lug

Use is optional. The supported AC power supplies have internal grounding, so no additional chassis grounding is required.

8

USB 3.0 Type A (USB 1)

9

USB 3.0 Type A (USB 2)

10

Management interface 1 (MGMT 1)

Restricted to management use only

11

Management interface 2 (MGMT 2)

Not in use

12

RPC port (RPC)

Use for remote power cycling.

13

Serial console port (Console)

RJ-45 connector that directly connects a management computer to the appliance.

14

Unit identification button

The following figure shows the rear panel of the WSA S695F. See Rear Panel LEDs for a description of the LEDs.

Figure 12. S695F Rear Panel

1

Traffic monitor port 1 (T1)

Use for Duplex Ethernet tap; one cable for all incoming and outgoing traffic.

1/10-Gigabit Ethernet SFP+ support

Note 

The GLX-SX-MMD (1 Gb) and SFP-10G-SR (10 Gb) are the only SFP+ transceivers qualified by Cisco. Use only Cisco-qualified SFPs.

Note 

Copper SFPs are not supported.

2

Traffic monitor port 2 (T2)

Use for Simplex Ethernet tap; one cable connected to T1 for all packets going to the internet. and one cable connected to T2 for all packets coming from the internet.

1/10-Gigabit Ethernet SFP+ support

Note 

The GLX-SX-MMD (1 Gb) and SFP-10G-SR (10 Gb) are the only SFP+ transceivers qualified by Cisco. Use only Cisco-qualified SFPs.

Note 

Copper SFPs are not supported.

3

Proxy port 1 (P1)

Connects to the network for both incoming and outgoing traffic.

1/10-Gigabit Ethernet SFP+ support

Note 

The GLX-SX-MMD (1 Gb) and SFP-10G-SR (10 Gb) are the only SFP+ transceivers qualified by Cisco. Use only Cisco-qualified SFPs.

Note 

Copper SFPs are not supported.

4

Proxy port 2 (P2)

When P1 and P2 are both enabled, you must connect P1 to the internal network and P2 to the internet.

Note 

You can connect P1 and P2 to an L4 switch, WCCP router, or network switch.

1/10-Gigabit Ethernet SFP+ support

Note 

The GLX-SX-MMD (1 Gb) and SFP-10G-SR (10 Gb) are the only SFP+ transceivers qualified by Cisco. Use only Cisco-qualified SFPs.

Note 

Copper SFPs are not supported.

5

1050-W AC power supply (PSU 1)

6

1050-W AC power supply (PSU 2)

7

Threaded holes for dual-hole grounding lug

Use is optional. The supported AC power supplies have internal grounding, so no additional chassis grounding is required.

8

Management interface 2 (MGMT 2)

Not supported

9

Management interface 1 (MGMT 1)

Restricted to management use only

10

USB 3.0 Type A (USB 1)

11

USB 3.0 Type A (USB 2)

12

Data interface (DATA 1)

13

Data interface (DATA 2)

14

RPC port (RPC)

Use for remote power cycling.

15

Serial console port (

RJ-45 connector that directly connects a management computer to the appliance.

16

Unit identification button

Rear Panel LEDs

The following figure shows the rear panel LEDs of the WSA S195 and describes their states. The S395 is the same except it has two power supplies. The S695 and S695F have the same LEDs except that these models have more data interfaces; the speed and status LED descriptions are the same.

Figure 13. S195 and S395 Rear Panel LEDs and Their States

1

Interface link speed:

  • Off—Link speed is 100 Mbps.

  • Amber—Link speed is 1 Gbps.

  • Green—Link speed is 10 Gbps.

2

Interface link status:

  • Off—No link is present.

  • Green—Link is active.

  • Green, flashing—Traffic is present on the active link.

3

Data interface link speed:

  • Off—Link speed is 10 Mbps.

  • Amber—Link speed is 100 Mbps.

  • Green—Link speed is 1 Gbps.

4

Data interface link status:

  • Off—No link is present.

  • Green—Link is active.

  • Green, flashing—Traffic is present on the active link.

5

Rear unit identification:

  • Off—The unit identification function is not in use.

  • Blue, flashing—The unit identification function is activated.

6

Power supply:

  • Off—No AC input (12-V main power off; 12-V standby power off)

  • Green, flashing—12-V main power off; 12-V standby power on.

  • Green—12-V main power on; 12-V standby power on.

  • Amber, flashing—Warning threshold detected but 12-V main power on.

  • Amber—Critical error detected; 12-V main power off ( for example, overcurrent, overvoltage, or overtemperature failure).

Power Supply


Note

Make sure that one power supply is always active.

The following table lists the specifications for the 770-W AC power supply (Cisco part number 341-0591-04) used in the WSA S195 and S395.

Table 2. 770-W Power Supply Specifications

Description

Specification

AC input voltage range

Nominal range: 100 to 120 V AC, 200 to 240 V AC

Range: 90–132 V AC, 180–264 V AC

AC input frequency

Nominal range: 50–60 Hz

Range: 47–63 Hz

Maximum AC input current

9.5 A peak at 100-V AC

4.5 A peak at 208 V AC

Maximum input volt amperes

950 VA at 100 V AC

Maximum output power for each power supply

770 W

Maximum inrush current

15 A (subcycle duration)

Maximum hold-up time

12 ms at 770 W

Power supply output voltage

12 V DC

Power supply standby voltage

12 V DC

Efficiency rating

Climate Savers Platinum Efficiency (80 Plus Platinum certified)

Form factor

RSP2

Input connector

IEC320 C13/C15

The following table lists the specifications for the 1050-W AC power supply (Cisco part number 341-0638-03) used in the WSA S695 and S695F.

Table 3. 1050-W Power Supply Specifications

Description

Specification

AC input voltage range

Nominal range: 100 to 120 V AC, 200 to 240 V AC

Range: 90–132 V AC, 180–264 V AC

AC input frequency

Nominal range: 50–60 Hz

Range: 47–63 Hz

Maximum AC input current

12.5 A peak at 100 V AC

6.0 A peak at 208 V AC

Maximum input volt amperes

1250 VA at 100 V AC

Maximum output power for each power supply

1050 W

Maximum inrush current

15 A (subcycle duration)

Maximum hold-up time

12 ms at 1050 W

Power supply output voltage

12 V DC

Power supply standby voltage

12 V DC

Efficiency rating

Climate Savers Platinum Efficiency (80 Plus Platinum certified)

Form factor

RSP2

Input connector

IEC320 C14

Hardware Specifications

The following table lists the hardware specifications for the WSA S195, S395, S695, and S695F.

Table 4. WSA S195, S395, S695, and S695F Hardware Specifications

Specification

S195

S395

S695

S695F

Weight

31 lb (14.06 kg)

33.5 lb (15.19 kg)

30.8 lb (13.97 kg)

52.2 lb (23.68 kg)

Dimensions (H x W x D)

1.7 x 16.89 x 29.8 inches (4.32 x 43.0 x 75.6 cm)

3.4 x 16.9 x 29.5 inches (8.64 x 42.92 x 74.93 cm)

Temperature

Operating: 41 to 95°F (5 to 35°C)

Derate the maximum temperature by 1°C for every 1000 ft (305 m) of altitude above sea level.

Nonoperating: –40 to 149°F (–40 to 65°C)

When stored or transported

Relative humidity

Operating: 10 to 90% noncondensing

Nonoperating: 5 to 93% noncondensing

Altitude

Operating: 0 to 10,000 ft

Nonoperating: 0 to 40,000 ft

When stored or transported

Sound power level

5.5 Bels (measure A-weighted per ISO7779 LWAd)

Operation at 73°F (23°C)

Sound pressure level

40 dBa (measure A-weighted per ISO7779 LpAM)

Operation at 73°F (23°C)

Product ID Numbers

The following table lists the PIDs associated with WSA S195, S395, S695, and S695F. The spare components are ones that you can order and replace yourself. If any internal components fail, you must get an RMA for the entire chassis including the SFPs and SFP cables. Remove the drives and power supplies before you send the chassis for RMA. See the Cisco Returns Portal for more information.

Table 5. WSA S195, S395, S695, and S695F PIDs

PID

Description

CCS-HDD-600GB10K

WSA S195, S395, S695, S695F HDD

CCS-HDD-600GB10K=

WSA S195, S395, S695, S695F HDD (spare)

CCS-PSU1-770AC

WSA S195 and S395 770 AC power supply

CCS-PSU1-770AC=

WSA S195 and S395 770 AC power supply (spare)

CCS-PSU1-1050AC

WSA S695 and S695F 1050 AC power supply

CCS-PSU1-1050AC=

WSA S695 and S695F 1050 AC power supply (spare)

UCSC-RAILB-M4

WSA S195, S395, S695, and S695F rail kit

UCSC-RAILB-M4=

WSA S195, S395, S695, and S695F rail kit (spare)

UCSC-BZL-C220M5

WSA S195 and S395 1 RU locking faceplate

UCSC-BZL-C220M5=

WSA S195 and S395 1 RU locking faceplate (spare)

UCSC-BZL-C240M5

WSA S695 and S695F 2 RU locking faceplate

UCSC-BZL-C240M5=

WSA S695 and S695F 2 RU locking faceplate (spare)

SFP-10G-SR

ESA C695F 10-Gb SFP

SFP-10G-SR=

ESA C695F 10-Gb SFP (spare)

GLC-SX-MMD

ESA C695F 1-Gb SFP

GLC-SX-MMD=

ESA C695F 1-Gb SFP (spare)

Power Cord Specifications

Each power supply has a separate power cord. Standard power cords or jumper power cords are available for connection to the WSA. The jumper power cords for use in racks are available as an optional alternative to the standard power cords.

If you do not order the optional power cord with the system, you are responsible for selecting the appropriate power cord for the product. Using a incompatible power cord with this product may result in electrical safety hazard. Orders delivered to Argentina, Brazil, and Japan must have the appropriate power cord ordered with the system.

The following power cords and jumper cords are supported.

Figure 14. Argentina CAB-250V-10A-AR

1

Plug: IRAM 2073

2

Cord set rating: 10 A, 250 V

3

Connector: IEC 60320/C13

Figure 15. Australia CAB-9K10A-AU

1

Plug: A.S. 3112-2000

2

Cord set rating: 10 A, 250 V

3

Connector: IEC 60320/C15

Figure 16. Brazil PWR-250V-10A-BZ

1

Plug: NBR 14136

2

Cord set rating: 10 A, 250 V

3

Connector: IEC 60320/C13

Figure 17. Cabinet Jumper CAB-C13-C14-2M

1

Plug: SS10A

2

Cord set rating: 10A, 250V

3

Connector: HS10S, C-13 to C-14

Figure 18. Cabinet Jumper CAB-C13-C14-AC

1

Plug: SS10A

2

Cord set rating: 10 A, 250 V

3

Connector: HS10S, C-13 to C-14 (recessed receptacle)

Figure 19. Cabinet Jumper CAB-C13-CBN

1

Plug: SS10A

2

Cord set rating: 10 A, 250 V

3

Connector: HS10S, C-13 to C-14

Figure 20. China CAB-250V-10A-CH

1

Plug: GB2099.1/2008

2

Cord set rating: 10 A, 250 V

3

Connector: IEC 60320/C13

Figure 21. Europe CAB-9K10A-EU

1

Plug: CEE 7/7 (M2511)

2

Cord set rating: 10 A/16 A, 250 V

3

Connector: IEC 60320/C15 (VSCC 15)

Figure 22. India CAB-250V-10A-ID

1

Plug: IS 6538-1971

2

Cord set rating: 16 A, 250 V

3

Connector: IEC 60320-C13

Figure 23. Israel CAB-250V-10A-IS

1

Plug: SI-32

2

Cord set rating: 10 A, 250 V

3

Connector: IEC 60320-C13

Figure 24. Italy CAB-9K10A-IT

1

Plug: CEI 23-16/VII (I/3G)

2

Cord set rating: 10 A, 250 V

3

Connector: IEC 60320/C15

(EN 60320/C15M)

Figure 25. Japan CAB-JPN-3PIN

1

Plug: JIS 8303

2

Cord set rating: 12 A, 125 V

3

Connector: IEC 60320/C13

Figure 26. Japan CAB-C13-C14-2M-JP

1

Plug: EN 60320-2-2/E

2

Cord set rating: 10 A, 250 V

3

Connector: EN 60320/C13 to C14

Figure 27. Korea CAB-9K10S-KOR

1

Plug: EL211 (KSC 8305)

2

Cord set rating: 10 A, 250 V

3

Connector: IEC 60320/C15

Figure 28. North America CAB-9K12A-NA

1

Plug: NEMA5-15P

2

Cord set rating: 13 A, 125 V

3

Connector: IEC 60320/C15

Figure 29. North America CAB-N5K6A-NA

1

Plug: NEMA6-15P

2

Cord set rating: 10 A, 125 V

3

Connector: IEC 60320/C13

Figure 30. North America CAB-AC-L620-C13

1

Plug: NEMA L6-20 (molded twist lock)

2

Cord set rating: 13 A, 250 V

3

Connector: IEC 60320/C13

Figure 31. Switzerland CAB-9K10A-SW

1

Plug: SEV 1011 (MP232-R)

2

Cord set rating: 10 A, 250 V

3

Connector: IEC 60320/C15

Figure 32. Taiwan CAB-ACTW

1

Plug: EL 302 (CNS10917)

2

Cord set rating: 10 A, 125 V

3

Connector: IEC 60320/C13

Figure 33. United Kingdom CAB-9K10A-UK

1

Plug: BS1363A/SS145

2

Cord set rating: 10 A, 250 V

3

Connector: IEC 60320/C15