Cisco WSA bug CSCve59632 (Workaround)

[Michael Rizk]

Symptoms

 If WSA stopped responding to Web requests and a reboot fixed it ... may be also if Cisco TAC confirmed you are hit with the Bug CSCve59632 

Diagnosis

Cisco Bug CSCve59632 affects WSA, As when Certain number of closed sessions reached the WSA will stop processing web requests.

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCve59632/?rfs=iqvred

Solution(Workaround)

I created a Python Script to query X number WSAs for the total number of closed sessions and if reached a certain limit ( you have to figure out that ) the script will send an email notification ... You need to workout what number if reached the WSA will stop working so you can adjust the number in the Script accordingly..

In the Script you can also add an automated action to proxy kick command to reboot the proxy service -- but take extra caution before doing that .. i recommend to do some testing using email notifications first before attempting to reboot the service automatically

here is a link to my script

https://github.com/MichaelRizk/Cisco-WSA-CSCve59632 

Regards,

Michael