topic Cisco Iron Port explicit mode in Web Security

Cisco Iron Port explicit mode

mohamed fayz — Mon, 01 Apr 2013 12:11:10 GMT

hai All,

I Have setup my ironport WSA in explicit mode, which is placed in ASA DMZ. All the Http,Https, ftp traffic are working fine. But, we have some applications, which is not using any of the above protocols. These applications are using some ports.So, how can i pass all these application to my WSA proxy, since the application doesnt know who is my proxy!!! any solution.

Regards,

FAyz

Cisco Iron Port explicit mode

Chris Illsley — Thu, 04 Apr 2013 09:14:19 GMT

Not really, if the application can't be configured to use a proxy and doesn't pick it up from the PC settings it won't work.

Explicit mode requires the application to initiate connection to the proxy.

Thanks

Chris

Cisco Iron Port explicit mode

Christian Rahl — Thu, 04 Apr 2013 13:45:08 GMT

Additionally if the application is using the proxy settings but using some non standard port it might be blocked. Verify the port is allowed to go through by checking the Web Security Manager -> Access Policies -> Protocols and User Agents -> HTTP Connect ports. If the port is not allowed in there, it will not allow the application to create a connection.

Christian Rahl

Customer Support Engineer

Cisco Web Content Security Appliance

Cisco Technical Assistance Center RTP