ASA 5500 and Websense

[blundberg]

I have the Cisco Websense module in a 2800 router and the ASA 5500 routing traffic to the the Websense module. Websense stopped filtering (I can reach sites that are blocked)so I checked the Websense interface on the router and it is not receiving packets. Traffic is being routed to the internetas though the ASA is not routing to Websense. The config on the ASA has not been changed. Any ideas?

[smartin]

Try rebooting the ASA. I'm currently using the software version & when I reboot the Websense server it will not connect with the ASA until I reboot the firewall.

[smartin]

Chech out CSCsd02938 Bug Details

Case Number K65713155

Title ASA or PIX 7.0 loses connectivity to Websense server

Core issue The Adaptive Security Appliance (ASA) can lose connectivity to the Websense server in these two situations:

When the IP connectivity to the server breaks

When the service on the server stops

In both these cases, the ASA does not try to reconnect to the server. A packet capture on the ASA interface does not indicate packets that go out towards the Websense server in an attempt to reconnect.

Resolution To resolve the problem, perform these steps:

Remove the url-server command.

Re-apply the url-server command.

This problem is fixed in versions 7.0(5), 7.3(0.1), 7.2(0.40), 7.0(4.13), and 7.1(2.1).

For more information, refer to Cisco bug ID CSCsd02938.

Problem Type Connectivity

Product Family Firewall - PIX 500 series

PIX Software Version PIX version 7.x

ASA Software Version 7.0

Features & Tasks URL Filtering

Websense