Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About Tao Yang
08-31-2018
Stats
Member since
08-06-2012
171
Posts
139
Helpful
34
Solutions
08-10-2018
12:07 AM
It is actually the expected behaviour. The DNS forward of Cisco Anyconnectr Umbrella roaming module is running at kernel level and it doesn't need to change the local DNS settings like the standalone Umbrella roaming client. Please refer to the following KB for more details.
https://support.umbrella.com/hc/en-us/articles/360000429306-Standalone-Roaming-Client-vs-AnyConnect-Roaming-Module
... View more
08-08-2017
04:13 PM
Here is the bug for Chrome.
https://bugs.chromium.org/p/chromium/issues/detail?id=749680
... View more
04-30-2017
06:18 PM
Basically WSA is using AVC (Application Visibility and Control) to only block Youtube HD video.
If it is over HTTPs, you also need to ensure " Decrypt for Application Detection: " is also enabled in WSA HTTPs proxy>Decryption Options.
If it is still not working, please create a new Cisco TAC case for this.
Please rate or mark the question as answered if this helps.
... View more
04-21-2017
12:09 AM
Hello Tomas,
Eval customer can also create the TAC case. Please create a new TAC case to fix this issue.
... View more
04-10-2017
05:20 PM
The WSA access log indicated it was blocked due to Proxy Authentication. Try to bypass proxy authentication to see if it helps.
Line 1816: 1491261293.366 0 10.7.3.7 TCP_DENIED/401 0 HEAD http://webfilter/B0000D0000N0001N0001F0000S0000R0004/10.7.3.7/http://7.d... - NONE/- - OTHER-NONE-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-"> - "Microsoft-Delivery-Optimization/10.0"
... View more
03-29-2017
05:23 PM
WSA will try to match the Identity firstly and all conditions in Identity are AND. After matching the Identity, WSA will try to match the Access Policy, therefore the Identity being used by Access Policy is independent. There is no relationship between the Identities in one Access Policy.
Please bear in mind that WSA will match from top and it will move to the next stage as soon as it matches.
Hope it helps and please mark my reply as correct answer if it does.
... View more
03-28-2017
11:21 PM
It is a known issue for now. A recent Microsoft security update has caused issues in several customer environments wherein their domain controllers stop logging these 4768 event IDs. The offending KBs are listed below:
KB4012212 (2008) / KB4012213 (2012) KB4012215 (2008) / KB4012216 (2012)
As a current workaround, users should be able to uninstall the above mentioned KBs and the 4768 event IDs should resume logging. As of the date of this initial publication (3/28/2017), we do not yet know of a permanent fix from Microsoft. There are several threads tracking this issue below:
Reddit:
https://www.reddit.com/r/sysadmin/comments/5zs0nc/ heads_up_ms_kb4012213_andor_ms_kb4012216_disables/
UltimateWindowsSecurity.com:
http://forum.ultimatewindowssecurity.com/Topic7340 -276-1.aspx
Microsoft TechNet:
https://social.technet.microsoft.com/Forums/system center/en-US/4136ade9-d287-4a42-b5cb-d6042d227e4f/ ...
... View more
03-23-2017
01:12 PM
In general, WSA needs to connect to the configured AD servers over port 445 for proxy authentication. Enable surrogate in WSA identity setting could normally reduce such connections.
... View more
03-21-2017
01:24 PM
We have some changes in version 9.x and version 10.x. Especially we introduced a new command "networktunning" from version 9.x.
Here is quoted from version 9.x release notes.
###
CLI command, networktuning, which can be used to change send and receive buffer sizes. Use carefully; see the section “Upload/Download Speed Issues” in the Troubleshooting chapter of the user guide for more information.
###
... View more
03-21-2017
01:21 PM
Glad it is helpful. P lease mark my reply as correct answer if it does.
... View more
03-20-2017
01:17 PM
We have a couple of customer configuring like that. However please bear in mind the priority is within the same HA group.
... View more
03-20-2017
01:15 PM
Firstly please bear in mind the working as a proxy server, WSA has network tweak to ensure all users will not be impacted by a large download/upload.
According to your posted one package, it looks a client connection between client machine and WSA. It is quite difficult to determine the cause as quite a lot issues could cause this like WSA could not complete the upload to the server quickly etc.
... View more
08-10-2018
It is actually the expected behaviour. The DNS forward of Cisco
Anyconnectr Umbrella roaming module ...
04-30-2017
Basically WSA is using AVC (Application Visibility and Control) to only
block Youtube HD video. If i...
04-21-2017
Hello Tomas, Eval customer can also create the TAC case. Please create a
new TAC case to fix this is...
04-10-2017
The WSA access log indicated it was blocked due to Proxy Authentication.
Try to bypass proxy authent...
03-29-2017
WSA will try to match the Identity firstly and all conditions in
Identity are AND. After matching th...
03-28-2017
It is a known issue for now. A recent Microsoft security update has
caused issues in several custome...
03-23-2017
In general, WSA needs to connect to the configured AD servers over port
445 for proxy authentication...
03-21-2017
We have some changes in version 9.x and version 10.x. Especially we
introduced a new command "networ...
03-20-2017
We have a couple of customer configuring like that. However please bear
in mind the priority is with...
Public Statistics
| Date Registered | 08-06-2012 11:19 PM |
| Date Last Visited | 08-31-2018 12:01 AM |
| Total Messages Posted | 171 |
| Total Helpful Votes Received | 139 |
Helpful Votes From
