This is  an update for Web Security Appliance customers running releases 7.0.x or 7.1.x & using Sophos virus scanning.  A Sophos IDE patch is now available that resolves this problem. Problem Summary: The primary Cisco IronPort datacenter encountered a core switch failure at approximately 4:30am PDT yesterday, May 22, 2012.  Following this event we received customer reports of issues relating to   Sophos and performance.  It was determined that some customers had an outdated Sophos update that could potentially cause data corruption or impact   the performance of their appliances.  Cisco Engineering was able to identify the cause of this problem and released a Sophos IDE patch at 07:20 PM PDT that fixes this problem.    How To Upgrade Prior to upgrading, please save a copy of the configuration file somewhere other than on your appliance. This Upgrade requires you to reboot your appliance if you are running an outdated Sophos IDE. Note: If your WSA doesn't require this patch you will not be asked to reboot. You will just need to click "Clear Upgrade" in the WebUI or exit the session in the CLI. From the CLI: 1. Log into the command line of your Cisco IronPort Appliance as the 'admin' user 2. Type 'upgrade' 3. When asked if you are sure you would like to reboot, press 'Yes' From WebUI: 1. Go to 'System Upgrade' in the 'System Administration' tab 2. Select 'Sophos IDE Patch Update (Reboot May Be Required)' from the list of updates. 3. After upgrade completes, click on 'Reboot Now' Once the the IDE patch upgrade and reboot is complete, it will bring your Sophos virus definitions back to factory default and they will be automatically updated  to the latest definitions at the next scheduled update. If you do not want to wait until the next scheduled update, you can choose to update now by using the following steps:   WebUI: 1. Security Services -> Anti-Malware page and click 'Update Now' button   CLI: 1. Run 'updatenow' If you took the precautionary step of temporarily disabling Sophos virus scanning, you should re-enable it after loading the Sophos IDE patch by using the following instructions:   1) Login to the Web Security Appliance via HTTP to the GUI 2) Go to Security Services -> Anti-Malware 3) Click at “Edit Global Settings” 4) Check “Enable Sophos” 5) Press “Submit” 6) Commit the changes     We apologize for any inconvenience this has caused.   ... View more

To Cisco IronPort customers: License key notification emails that were sent from Cisco  IronPort yesterday between 11am and 4PM PST and that appear to have  incorrect end dates can be disregarded.  The key information within  those emails contained old data.  Customers can view their correct  license key information through the Cisco IronPort appliance GUI. We sincerely apologize for any confusion this has caused. Best regards, Cisco IronPort ... View more

To Cisco IronPort customers: License key notification emails that were sent from Cisco IronPort yesterday between 11am and 4PM PST and that appear to have incorrect end dates can be disregarded.  The key information within those emails contained old data.  Customers can view their correct license key information through the Cisco IronPort appliance GUI. We sincerely apologize for any confusion this has caused. Best regards, Cisco IronPort ... View more

Hello,       Cisco IronPort has identified a SPAM Outbreak with Subject "Here you have" and has published IronPort AntiSpam rules to protect from these messages.   If you notice the messages bypassing your Email Security Appliance, please verify that these messages are being scanned by IronPort AntiSpam via Message Tracking or Mail logs.   If these messages are not being scanned by IronPort AntiSpam due to Whitelisting or Policy exceptions, you can create an incoming content filter to catch these messages.   For additional information, please refer the KB article # 1629 below.   http://ironport.custhelp.com/cgi-bin/ironport.cfg/php/enduser/std_adp.php?p_faqid=1629&p_created=1284070094&p_sid=dZEAvC9k&p_accessibility=0&p_redirect=&p_srch=1&p_lva=&p_sp=cF9zcmNoPTEmcF9zb3J0X2J5PSZwX2dyaWRzb3J0PSZwX3Jvd19jbnQ9MSwxJnBfcHJvZHM9MCZwX2NhdHM9MCZwX3B2PSZwX2N2PSZwX3NlYXJjaF90eXBlPWFuc3dlcnMuc2VhcmNoX25sJnBfcGFnZT0xJnBfc2VhcmNoX3RleHQ9MTYyOQ !!&p_li=&p_topview=1   Please feel free to contact Cisco IronPort Customer Support if you need additional assistance.   Best Regards, Cisco IronPort Customer Support ... View more

Dear Cisco IronPort customers. As of 2:30PM PST  08/06/2010 the Cisco IronPort Customer Support ticketing system  experienced a system problem that may prevent customers from being able  to view their open support tickets.  If you are encountering a new Cisco  IronPort appliance problem or need an update on an existing problem,  please call us at (877) 641-IRON or (650) 989-6533.  We hope to have this problem resolved within the hour, and appologize for the inconvenience. Cisco IronPort Customer Support Management ... View more

Dear Cisco IronPort customers. As of 2:30PM PST 08/06/2010 the Cisco IronPort Customer Support ticketing system experienced a system problem that may prevent customers from being able to view their open support tickets.  If you are encountering a new Cisco IronPort appliance problem or need an update on an existing problem, please call us at (877) 641-IRON or (650) 989-6533.  We hope to have this problem resolved within the hour, and appologize for the inconvenience. Cisco IronPort Customer Support Management ... View more