Cisco S195 Manual

Cisco Web Security Appliance S195, S395, S695, and S695F Hardware
Installation Guide
First Published: 2019-07-08
Last Modified: 2021-07-19
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,
INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,
EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH
THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,
CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of
the UNIX operating system. All rights reserved. Copyright ©1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.
CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF
MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT
LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS
HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network
topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional
and coincidental.
All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.
Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.
Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:
https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a
partnership relationship between Cisco and any other company. (1721R)
©2019-2021 Cisco Systems, Inc. All rights reserved.

CONTENTS
Overview 1
CHAPTER 1
Features 1
Package Contents 4
Serial Number Locations 4
Front Panel 6
Front Panel LEDs 9
Rear Panel 12
Rear Panel LEDs 15
Power Supply 16
Hardware Specifications 17
Product ID Numbers 18
Power Cord Specifications 19
Installation Preparation 27
CHAPTER 2
Installation Warnings 27
Safety Recommendations 29
Maintain Safety with Electricity 29
Prevent ESD Damage 30
Site Environment 30
Site Considerations 31
Power Supply Considerations 31
Rack Configuration Considerations 31
Rack-Mount the Chassis 33
CHAPTER 3
Unpack and Inspect the Chassis 33
Rack-Mount the Chassis 33
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
iii

Maintenance and Upgrades 37
CHAPTER 4
Power Button Shut Down 37
Enable RPC 38
Reset the Chassis Remotely 39
Install/Uninstall the Locking Faceplate 39
Remove and Replace a Drive 40
Remove and Replace a Power Supply 43
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
iv
Contents

CHAPTER 1
Overview
•Features, on page 1
•Package Contents, on page 4
•Serial Number Locations, on page 4
•Front Panel, on page 6
•Front Panel LEDs, on page 9
•Rear Panel, on page 12
•Rear Panel LEDs, on page 15
•Power Supply, on page 16
•Hardware Specifications, on page 17
•Product ID Numbers, on page 18
•Power Cord Specifications, on page 19
Features
The Cisco Web Security Appliances (WSA) S195, S395, S695, and S695F help organizations secure and
control web traffic.
The WSA S195, S395, S695, and S695F support Cisco AsyncOS version 11.8 and later. See Product ID
Numbers, on page 18 for a list of field-replaceable product IDs (PIDs) associated with the WSA security
appliances.
The following figures show the Cisco Web Security appliances.
Figure 1: Cisco Web Security S195 and S395
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
1

Figure 2: Cisco Web Security S695 and S695F
The following table lists the features of the WSA S195, S395, S695, and S695F.
Table 1: WSA S195, S395, S695, and S695F Features
S695FS695S395S195Feature
2 RU1 RUForm factor
Standard 19-inch (48.3 cm) 4-post EIA rackRack mount
Front to rear
Cold aisle to hot aisle
Airflow
Displays the serial numberPullout asset card
Two threaded holes for dual-hole grounding lug
Use is optional; the supported AC power supplies have internal grounding, so
no additional chassis grounding is required.
Grounding holes
OptionalLocking faceplate
On front panelUnit identification button
On rear panelPower button
Before January 2021: Two Intel Xeon
6126
After January 2021: Two Intel Xeon
6226
Before January
2021: One Intel
Xeon 5118
After January
2021: One Intel
Xeon 5218
Before January
2021: One Intel
Xeon 4110
After January
2021: One Intel
Xeon 4210
Processor
64-GB RAM32-GB RAM16-GB RAMMemory
Before January 2021: Four 16-GB
DDR4-2400-MHz DIMM
After January 2021: Four 16-GB
DDR4-2933-MHz DIMM
Before January
2021: Two 16-GB
DDR4-2400-MHz
DIMM
After January
2021: Two 16-GB
DDR4-2933-MHz
DIMM
Before January
2021: One 16-GB
DDR4-2400-MHz
DIMM
After January
2021: One 16-GB
DDR4-2933-MHz
DIMM
RDIMMs
Internal component only; not
field-replaceable
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
2
Overview
Features

S695FS695S395S195Feature
One (M1)
M2 is not supported.
Management ports
Two (P1 and P2)Proxy ports
Two (T1 and T2)Traffic ports
Accessed through the 1-Gb dedicated portRemote power cycling
(RPC)
Two USB 3.0 Type AUSB ports
Six fiber optic
NoSFP+ ports
GLX-SX-MMD (1
Gb) (optional)
SFP-10G-SR (10
Gb) (optional)
—Supported SFP+
These SFPs have
been qualified by
Cisco. Use only
Cisco-qualified
SFPs.
Note
Copper SFPs are
not supported.
Note
One 1-Gb RJ45 serial port running RS-232 (RS-232D TIA-561)Serial console port
Two
1050 W AC
Hot-swappable and redundant as 1+1
Two
770 W AC
Hot-swappable
and redundant as
1+1
One
770 W AC
You can order a
second power
supply for
redundancy as
1+1.
AC power supply
Do not mix
power supply
type or wattage
between models.
Note
Six fans for front-to-rear cooling
Internal component only; not field-replaceable. If one fan fails, you must send
your chassis for return material authorization (RMA).
Fans
Sixteen 600-GB SAS HDDs
RAID 10, hot-swappable
Four 600-GB SAS
HDDs
RAID 10,
hot-swappable
Two 600-GB SAS
HDDs
RAID 1,
hot-swappable
Storage
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
3
Overview
Features

Package Contents
The following figure shows the package contents for the WSA S195, S395, S695, and S695F. Note that the
contents are subject to change and your exact contents might contain additional or fewer items.
Figure 3: Package Contents
RJ-45 to DB9-RS232 console cable (Cisco part
number 72-3383-XX)
2Chassis1
RJ-45 to RJ-45 Cat 5 Ethernet cable, yellow six
feet long (Cisco part number 72-1482-XX)
4Cisco rail kit (Cisco part number 800-43376-02)3
Two 1-Gb or 10-Gb SFP+ fiber optic transceivers
with cables
Supported on the S695F. You cannot
mix SFP transceiver types in the same
chassis. You can either have two 1-Gb
or two 10-Gb SFPs in the same
chassis.
Note
6Useful Links document
The steps in the Useful Links document send you
to the documentation you need to install, set up,
and configure your WSA appliance.
5
Serial Number Locations
The serial number (SN) for the WSA S195, S395, S695, and S695F is printed on the pullout asset card located
on the front panel as shown in the following figure.
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
4
Overview
Package Contents

Figure 4: Serial Number on Pullout Asset Card
The serial number is also on the label on the cover of the chassis as shown in the following figure.
The cover latch on the top of the chassis cover is not supported. There are no internal field-replaceable parts
in the WSA S195, S395, S695, and S695F.
Caution
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
5
Overview
Serial Number Locations

Figure 5: Serial Number Location on Cover
Cover latch
Not supported
2Serial number label1
Front Panel
The following figure shows the front panel features and disk-drive configuration for the WSA S195. See Front
Panel LEDs, on page 9 for a description of the LEDs.
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
6
Overview
Front Panel

Figure 6: S195 Front Panel
Power button/power status LED2Drive bays
Supports two 600-GB SAS HDDs in slots 1 and
2
1
System status LED4Unit identification button/LED3
Fan status LED6Power supply status LED5
Temperature status LED8Network link activity LED7
—Pullout asset card9
The following figure shows the front panel features and disk-drive configuration for the WSA S395. See Front
Panel LEDs, on page 9 for a description of the LEDs.
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
7
Overview
Front Panel

Figure 7: S395 Front Panel
Power button/power status LED2Drive bays
Supports four 600-GB SAS HDDs in slots 1
through 4
1
System status LED4Unit identification button/LED3
Fan status LED6Power supply status LED5
Temperature status LED8Network link activity LED7
—Pullout asset card9
The following figure shows the front panel features and disk-drive configuration for the WSA S695 and
S695F. See Front Panel LEDs, on page 9 for a description of the LEDs.
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
8
Overview
Front Panel

Figure 8: S695 and S695F Front Panel Features
Power button/power status LED2Drive bays
Supports sixteen 600-GB SAS HDDs in slots 1
through 16
1
System status LED4Unit identification button/LED3
Temperature status LED6Fan status LED5
Network link activity LED8Power supply status LED7
—Pullout asset card9
Front Panel LEDs
The following figure shows the front panel LEDs for the S195, S395, S695, and S695F, and describes their
states.
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
9
Overview
Front Panel LEDs

Figure 9: Front Panel LEDs and Their States
Drive activity LED:
• Off—There is no drive in the drive tray (no
access, no fault).
• Green—The drive is ready.
• Green, flashing—The drive is reading or
writing data.
2Drive fault LED:
• Off—The drive is operating properly.
• Amber—Drive fault detected.
• Amber, flashing—The drive is rebuilding.
• Amber, flashing with 1-second
interval—Drive locate function activated in
the software.
1
Unit identification LED:
• Off—The unit identification function is not
in use.
• Blue, flashing—The unit identification
function is activated.
4Power LED:
• Off—There is no AC power to the chassis.
• Amber—The chassis is in standby mode.
• Green—The chassis is in main power mode.
Power is supplied to all components.
3
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
10
Overview
Front Panel LEDs

Power supply status LED:
• Green—All power supplies are operating
normally.
• Amber—One or more power supplies are in
a degraded operational state.
• Amber, flashing—One or more power
supplies are in a critical fault state.
6System status LED:
• Green—The chassis is running in normal
operating condition.
• Green, flashing—The chassis is performing
system initialization and memory check.
• Amber—The chassis is in a degraded
operational state (minor fault).
• Power supply redundancy is lost.
• CPUs are mismatched.
• At least one CPU is faulty.
• At least one DIMM is faulty.
• At least one drive in a RAID
configuration failed.
• Amber, 2 flashes—There is a major fault
with the system board.
• Amber, 3 flashes—There is a major fault
with the DIMMs.
• Amber, 4 flashes—There is a major fault
with the CPUs.
5
Network link activity LED:
• Off—The Ethernet port link is idle.
• Green—One or more Ethernet ports are
link-active, but there is no activity.
•Green, flashing—One or more Ethernet ports
are link-active with activity.
8Fan status LED:
• Green—All fans are operating properly.
• Amber, flashing—One or more fans
breached the nonrecoverable threshold.
7
—Temperature status LED:
• Green—The chassis is operating at normal
temperature.
• Amber—One or more temperature sensors
breached the critical threshold.
• Amber, flashing—One or more temperature
sensors breached the nonrecoverable
threshold.
9
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
11
Overview
Front Panel LEDs

Rear Panel
The following figure shows the rear panel of the WSA S195 and S395. See Rear Panel LEDs, on page 15 for
a description of the LEDs.
Figure 10: S195 and S395 Rear Panel
USB 3.0 Type A (USB 2)2USB 3.0 Type A (USB 1)1
Management interface (M2)
Not in use
4Management interface (M1)
Restricted to management use only
3
Serial console port (Console)
RJ-45 connector that directly connects a
management computer to the appliance.
6RPC port (RPC)
Use for remote power cycling.
5
770-W AC power supply (PSU 1)8Unit identification button7
Threaded holes for dual-hole grounding lug
Use is optional. The supported AC power supplies
have internal grounding, so no additional chassis
grounding is required.
10770-W AC power supply (PSU 2)
The S195 ships with one power supply, but you
can order a second one for redundancy. The S395
ships with two power supplies.
9
Proxy port 2 (P2)
When P1 and P2 are both enabled, you must
connect P1 to the internal network and P2 to the
internet.
You can connect P1 and P2 to an L4
switch, WCCP router, or network
switch.
Note
12Proxy port 1 (P1)
Connects to the network for both incoming and
outgoing traffic.
11
Traffic monitor port 2 (T2)
Use for Simplex Ethernet tap; one cable connected
to T1 for all packets going to the internet. and one
cable connected to T2 for all packets coming from
the internet.
14Traffic monitor port 1 (T1)
Use for Duplex Ethernet tap; one cable for all
incoming and outgoing traffic.
13
—Riser handle
Not supported
15
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
12
Overview
Rear Panel

The following figure shows the rear panel of the WSA S695. See Rear Panel LEDs, on page 15 for a description
of the LEDs.
Figure 11: S695 Rear Panel
Proxy port 2 (P2)
When P1 and P2 are both enabled, you must
connect P1 to the internal network and P2 to the
internet.
You can connect P1 and P2 to an L4
switch, WCCP router, or network
switch.
Note
2Proxy port 1 (P1)
Connects to the network for both incoming and
outgoing traffic.
1
Traffic monitor port 2 (T2)
Use for Simplex Ethernet tap; one cable connected
to T1 for all packets going to the internet. and one
cable connected to T2 for all packets coming from
the internet.
4Traffic monitor port 1 (T1)
Use for Duplex Ethernet tap; one cable for all
incoming and outgoing traffic.
3
1050-W AC power supply (PSU 2)61050-W AC power supply (PSU 1)5
USB 3.0 Type A (USB 1)8Threaded holes for dual-hole grounding lug
Use is optional. The supported AC power supplies
have internal grounding, so no additional chassis
grounding is required.
7
Management interface 1 (MGMT 1)
Restricted to management use only
10USB 3.0 Type A (USB 2)9
RPC port (RPC)
Use for remote power cycling.
12Management interface 2 (MGMT 2)
Not in use
11
Unit identification button14Serial console port (Console)
RJ-45 connector that directly connects a
management computer to the appliance.
13
The following figure shows the rear panel of the WSA S695F. See Rear Panel LEDs, on page 15 for a
description of the LEDs.
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
13
Overview
Rear Panel

Figure 12: S695F Rear Panel
Traffic monitor port 2 (T2)
Use for Simplex Ethernet tap; one cable connected
to T1 for all packets going to the internet. and one
cable connected to T2 for all packets coming from
the internet.
1/10-Gigabit Ethernet SFP+ support
The GLX-SX-MMD (1 Gb) and
SFP-10G-SR (10 Gb) are the only
SFP+ transceivers qualified by Cisco.
Use only Cisco-qualified SFPs.
Note
Copper SFPs are not supported.
Note
2Traffic monitor port 1 (T1)
Use for Duplex Ethernet tap; one cable for all
incoming and outgoing traffic.
1/10-Gigabit Ethernet SFP+ support
The GLX-SX-MMD (1 Gb) and
SFP-10G-SR (10 Gb) are the only
SFP+ transceivers qualified by Cisco.
Use only Cisco-qualified SFPs.
Note
Copper SFPs are not supported.
Note
1
Proxy port 2 (P2)
When P1 and P2 are both enabled, you must
connect P1 to the internal network and P2 to the
internet.
You can connect P1 and P2 to an L4
switch, WCCP router, or network
switch.
Note
1/10-Gigabit Ethernet SFP+ support
The GLX-SX-MMD (1 Gb) and
SFP-10G-SR (10 Gb) are the only
SFP+ transceivers qualified by Cisco.
Use only Cisco-qualified SFPs.
Note
Copper SFPs are not supported.
Note
4Proxy port 1 (P1)
Connects to the network for both incoming and
outgoing traffic.
1/10-Gigabit Ethernet SFP+ support
The GLX-SX-MMD (1 Gb) and
SFP-10G-SR (10 Gb) are the only
SFP+ transceivers qualified by Cisco.
Use only Cisco-qualified SFPs.
Note
Copper SFPs are not supported.
Note
3
1050-W AC power supply (PSU 2)61050-W AC power supply (PSU 1)5
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
14
Overview
Rear Panel

Management interface 2 (MGMT 2)
Not supported
8Threaded holes for dual-hole grounding lug
Use is optional. The supported AC power supplies
have internal grounding, so no additional chassis
grounding is required.
7
USB 3.0 Type A (USB 1)10Management interface 1 (MGMT 1)
Restricted to management use only
9
Data interface (DATA 1)12USB 3.0 Type A (USB 2)11
RPC port (RPC)
Use for remote power cycling.
14Data interface (DATA 2)13
Unit identification button16Serial console port (
RJ-45 connector that directly connects a
management computer to the appliance.
15
Rear Panel LEDs
The following figure shows the rear panel LEDs of the WSA S195 and describes their states. The S395 is the
same except it has two power supplies. The S695 and S695F have the same LEDs except that these models
have more data interfaces; the speed and status LED descriptions are the same.
Figure 13: S195 and S395 Rear Panel LEDs and Their States
Interface link status:
• Off—No link is present.
• Green—Link is active.
• Green, flashing—Traffic is present on the
active link.
2Interface link speed:
• Off—Link speed is 100 Mbps.
• Amber—Link speed is 1 Gbps.
• Green—Link speed is 10 Gbps.
1
Data interface link status:
• Off—No link is present.
• Green—Link is active.
• Green, flashing—Traffic is present on the
active link.
4Data interface link speed:
• Off—Link speed is 10 Mbps.
• Amber—Link speed is 100 Mbps.
• Green—Link speed is 1 Gbps.
3
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
15
Overview
Rear Panel LEDs

Power supply:
• Off—No AC input (12-V main power off;
12-V standby power off)
•Green, flashing—12-V main power off; 12-V
standby power on.
• Green—12-V main power on; 12-V standby
power on.
• Amber, flashing—Warning threshold
detected but 12-V main power on.
• Amber—Critical error detected; 12-V main
power off ( for example, overcurrent,
overvoltage, or overtemperature failure).
6Rear unit identification:
• Off—The unit identification function is not
in use.
• Blue, flashing—The unit identification
function is activated.
5
Power Supply
Make sure that one power supply is always active.
Note
The following table lists the specifications for the 770-W AC power supply (Cisco part number 341-0591-04)
used in the WSA S195 and S395.
Table 2: 770-W Power Supply Specifications
SpecificationDescription
Nominal range: 100 to 120 V AC, 200 to 240 V AC
Range: 90–132 V AC, 180–264 V AC
AC input voltage range
Nominal range: 50–60 Hz
Range: 47–63 Hz
AC input frequency
9.5 A peak at 100-V AC
4.5 A peak at 208 V AC
Maximum AC input current
950 VA at 100 V ACMaximum input volt amperes
770 WMaximum output power for each power supply
15 A (subcycle duration)Maximum inrush current
12 ms at 770 WMaximum hold-up time
12 V DCPower supply output voltage
12 V DCPower supply standby voltage
Cisco Web Security Appliance S195, S395, S695, and S695F Hardware Installation Guide
16
Overview
Power Supply