<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic When using urlfilter web server becomes unavailable in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/when-using-urlfilter-web-server-becomes-unavailable/m-p/1575482#M611950</link>
    <description>&lt;P&gt;Remote Location (DET) has a vpn tunnel built to our main location (ML) where our websense server sits.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This is the websense configuration that is in place on DET. DET local LAN is 172.20.120.0/24&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; access-list 50 permit any log &lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip inspect name websenseinternet http java-list 50 urlfilter&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip urlfilter urlf-server-log&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip urlfilter server vendor websense 172.20.63.75&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip urlfilter allow-mode on&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; Interface FastEthernet0/0.1&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip inspect websenseinternet in&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip inspect websenseinternet out&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;There is a web server (actually its a ups snmp adapter that runs a webserver) that I need to get access to (172.20.120.23) If the websense configuration is running I am unable to access the web server. If the commands are removed, I can access the webserver no problem.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Any ideas?&lt;/P&gt;</description>
    <pubDate>Mon, 11 Mar 2019 18:38:05 GMT</pubDate>
    <dc:creator>pugs17211721</dc:creator>
    <dc:date>2019-03-11T18:38:05Z</dc:date>
    <item>
      <title>When using urlfilter web server becomes unavailable</title>
      <link>https://community.cisco.com/t5/network-security/when-using-urlfilter-web-server-becomes-unavailable/m-p/1575482#M611950</link>
      <description>&lt;P&gt;Remote Location (DET) has a vpn tunnel built to our main location (ML) where our websense server sits.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This is the websense configuration that is in place on DET. DET local LAN is 172.20.120.0/24&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; access-list 50 permit any log &lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip inspect name websenseinternet http java-list 50 urlfilter&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip urlfilter urlf-server-log&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip urlfilter server vendor websense 172.20.63.75&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip urlfilter allow-mode on&lt;/P&gt;&lt;P&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; Interface FastEthernet0/0.1&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip inspect websenseinternet in&lt;BR /&gt;&amp;nbsp;&amp;nbsp;&amp;nbsp; ip inspect websenseinternet out&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;There is a web server (actually its a ups snmp adapter that runs a webserver) that I need to get access to (172.20.120.23) If the websense configuration is running I am unable to access the web server. If the commands are removed, I can access the webserver no problem.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Any ideas?&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2019 18:38:05 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/when-using-urlfilter-web-server-becomes-unavailable/m-p/1575482#M611950</guid>
      <dc:creator>pugs17211721</dc:creator>
      <dc:date>2019-03-11T18:38:05Z</dc:date>
    </item>
    <item>
      <title>Re: When using urlfilter web server becomes unavailable</title>
      <link>https://community.cisco.com/t5/network-security/when-using-urlfilter-web-server-becomes-unavailable/m-p/1575483#M611952</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Can you please provide a better understanding of the topology that we are dealing with here?&amp;nbsp; As you describe above, this webserver/snmp adapter resides across the VPN tunnel - at the DET location - correct?&amp;nbsp; What is the VPN tunnel access-list?&amp;nbsp; From where are you trying to access this server?&amp;nbsp; Are you getting any syslogs?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If it isn't already there, please enable 'ip inspect log drop-pkt' on the DET device, as well as the local device.&amp;nbsp; After attempting to access the snmp adapter, gather the output of 'show log | inc FW'.&amp;nbsp; Do you receive any other syslogs at the time of the issue on either router?&amp;nbsp; Have you tried disabling firewall (CBAC) while leaving Websense enabled? Do you get any syslogs on the Websense server?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Any information that you can provide relevant to the topology and/or syslogs that are generated at the time of the failed access is greatly appreciated.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Best Regards,&lt;/P&gt;&lt;P&gt;Kevin&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 12 Sep 2010 20:36:19 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/when-using-urlfilter-web-server-becomes-unavailable/m-p/1575483#M611952</guid>
      <dc:creator>Kevin Redmon</dc:creator>
      <dc:date>2010-09-12T20:36:19Z</dc:date>
    </item>
  </channel>
</rss>

