Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi Daniel,
Thanks for providing the error message. You are right, the error message would be due to custom uploaded certs.
The error message seen during publish from SMA is tracked by defect CSCuv04220.
The defect however mentions that, although we s...
Hi Daniel,
On AsyncOS version 8.8, the Cisco trusted root certificate bundle can only be updated via updates from Cisco server or via AsyncOS version upgrade. Unfortunately there is no other way to update this list.
The custom root certificates shoul...
Joe,
The S370 appliances would need to have 8 GB RAM in order to upgrade to 9.0 version.
Could you please check if your S370 has 8 GB RAM using the CLI command - ipcheck?
If it has 8 GB RAM, then please open a TAC case and provide us the serial numbe...
Hi John,
You are right, the definitions do look the same.
May I request you to provide access logs for the concerned website from both devices?
You can configure each WSA in browser settings manually, access the website and then grep the access logs ...
Hi John,
Typically the WSA appliance shouldn't cache the URL category for more than few minutes. It should actively check and verify if the category is upto date.
We should see such a discrepancy if both devices don't have the same definitions/signat...
