Cisco Ironport ESA and WSA appliances are vulnerable only when running Sophos Anti-Virus. Cisco appliances using other antivirus programs are not affected.
Customers may implement a workaround by using an alternate antivirus program on the Cisco IronPort ESA and WSA appliances.
Cisco is providing 30-day trial licenses for McAfee antivirus software through Ironport Technical Support as an interim workaround. Customers may obtain a 30-day McAfee license at the following link: Ironport Technical Support
Customers can enable the 30-day evaluation key by accessing Security Services > Sophos/McAfee Anti-Virus
pages in the Web GUI or by executing the antivirusconfig
command in the CLI.
Cisco has obtained the Sophos software updates that address these
vulnerabilities and is working toward provisioning the updates.