Download Firmware Cisco ESA AsyncOS 11.1.1

Cisco recently released a firmware update for its Email Security Appliances, which are abbreviated to ESA. The technology comes from IronPort Systems, which was purchased by Cisco in 2007. Although that was more than a decade ago, you still hear the name IronPort for these appliances. For the supported upgrade paths, it is recommended to read the documentation or contact Cisco’s TAC† The firmware is called 11.1.1 and has 11.1.1-042 as the exact version number. The list of changes looks like this:

What’s New in AsyncOS 11.1.1

• Forged Email Detection Enhancement – You can now create an exception list consisting of only full email addresses to bypass the Forged Email Detection content filter in Mail Policies > Address Lists. You can use this exception list in the Forged Email Detection rule if you want the appliance to skip email addresses from the configured content filter.

Changes in Behavior in AsyncOS 11.1.1

• Changes in Demo Certificates – Prior to this release, the appliance was pre-configured with a demonstration certificate to enable the TLS connections. After you upgrade to this release, the appliance generates a unique certificate to enable TLS connection. The existing demonstration certificate that is used in the following configurations are replaced with the new certificate:
  • Mail Delivery
  • LDAP
  • Networking
  • URL Filtering
  • SMTP Services
• Changes in Self-Signed Certificates – Prior to this release, the appliance used SHA-1 signature hash algorithm to create a self-signed certificate. After you upgrade to this release, the appliance uses the SHA-256 signature hash algorithm to create self-signed certificates.
• URL Rewriting Changes for Graymail – If Graymail and Safe Unsubscribing is enabled on your appliance, the appliance now only rewrites all the original unsubscribe URLs whose length is less than 2000 characters.