How do you upgrade an Ironport S370 to version 8.x ? We have been advised to update ours to version 8.x however I cannot see anyway of doing this as it's not in avaialable updates the latest we can see is 7.7.0-761 which we are now running. I've looked everywhere but can find little information on how to do it. Thanks in advance for any help. ... View more

We have a cluster of 3 x Ironport S370's all running 7.7.0-753 The throughput is really poor we have a 500Mbps Internet connection which at it's peak is only getting to 120Mbps as the Ironports don't seem to be able to handle the traffic. The Proxy CPU% is always close to 100% but the overall CPU is usually at no more than 30% at times it can take up to 60 seconds to load the initial page particularly if the site is an HTTPS site. We have 22 Identities 62 Access policies 6 decryption Policies Our maintainer says that having this number of Identities / policies should not be an issue but I have my doubts. Can anyone advise as it's really become a major issue, Output from the rate and status commands are below.  %proxy  reqs                         client    server    %bw  disk  disk      CPU  /sec   hits blocks misses    kb/sec    kb/sec  saved   wrs   rds  99.00   285    373   1293   1193     26484     21838   17.5   550   100  99.00   286    209   1313   1335     28682     24532   14.5   635    80  99.00   285    182   1323   1359     37083     33529    9.6  1351     0 100.00   231    132   1051   1113     34816     34151    1.9   355     0  98.00   253    161   1171   1195     39668     37236    6.1  1363     0  99.00   294    256   1225   1469     51371     43304   15.7  1117    40  96.00   346    525   1166   1763     31882     23300   26.9  1328     0  98.00   302    228   1258   1534     30385     25565   15.9  1302     0  99.00   295    149   1200   1597     26253     22888   12.8   816     0  98.00   275    199   1020   1536     35237     31443   10.8   838     0  99.00   288    184   1131   1574     35019     26688   23.8  1433     0  99.00   262    116   1073   1437     24744     23228    6.1  1306     0 105.00   307    292   1165   1610     24249     20236   16.6  1061     0 Status as of:                  Thu Oct 16 08:28:10 2014 GMT Up since:                      Wed Oct 15 15:21:19 2014 GMT (17h 6m 51s) System Resource Utilization:   CPU                                    28.2%   RAM                                    82.6%   Reporting/Logging Disk                 16.0% Transactions per Second:   Average in last minute                   266   Maximum in last hour                     296   Average in last hour                     118   Maximum since proxy restart              296   Average since proxy restart                9 Bandwidth (Mbps):   Average in last minute                25.461   Maximum in last hour                  49.605   Average in last hour                  16.400   Maximum since proxy restart           49.605   Average since proxy restart            1.365 Response Time (ms):   Average in last minute                   179   Maximum in last hour                     526   Average in last hour                     192   Maximum since proxy restart            17710   Average since proxy restart             3165 Cache Hit Rate:   Average in last minute                    16   Maximum in last hour                      25   Average in last hour                       7   Maximum since proxy restart               25   Average since proxy restart                0 Connections:   Idle client connections                 1276   Idle server connections                 1170   Total client connections                1638   Total server connections                1890 ... View more

We are trying to get Spotify to work through our Ironport S370 which is configured for both HTTP and HTTPS proxy. Spotify allows you to set a HTTPS proxy which we have done but we continually get a 112 error which is a Spotify error meaning no connection (Check firewalls and proxies) We have created an Identity and decrption policy just for one user and all catagories are set to pass-through but this does not work. Does anyone have any ideas what we need to do to get this working as it is causing major issues to the education music department. Many thanks, Neil ... View more

I have just been patching out ACS 1121 on Ver 5.3 in preparation for upgrading to 5.5 however having successfully patched the secondary server I tried to promote this to the Primary and this seemed to fail with no error message. A reboot of the Secondary now has it asking for it's license file using the PAK supplied with the product. Is this normal ? and can I recover this as I don't have the PAK supplied.   Many thanks. ... View more

I have just been patching out ACS 1121 on Ver 5.3 in preparation for upgrading to 5.5 however having successfully patched the secondary server I tried to promote this to the Primary and this seemed to fail with no error message. A reboot of the Secondary now has it asking for it's license file using the PAK supplied with the product. Is this normal ? and can I recover this as I don't have the PAK supplied.   Many thanks. ... View more

We have recently found that Google images is no longer being controlled by our ironports leading to undesirable images being found. Users are now able to change their safe search options, we have the "Enable Safe Search" option and this is effective for all other search engines and was working until recently. We have the following set up 1 x M670(7.9.0-107) 3 x S370 (7.1.4-053) We urgently need to resolve this as currently any image is accessable in google images and in the short term we will have to block google completely which is not practicle. Any advice would be great. ... View more

I have a large campus with a large number of odd shaped buildings for which we do not have accurate floorplans and we need to run historical reports for the client count per AP however as far as I can see this is not possible unless I create maps and floorplans of the site. Is there any way to get the client count per AP on a historical basis without the need to create maps and floorplans of the whole site. ... View more

We are in the early stages of implementing a BYOD wireless network but want to limit the number of devices an individual can authenticate using the ACS. Currently we are using MAC address filtering on a limited scale (On the WLC) to give access to a few select users however this is not a scaleable solution. The devices that are authenticating are a mixture Apple, Android and Windows and we are using an AD account and group membership to authenticate the user however if we remove the MAC address filtering each user can authenticate multple devices which unfortunatly some of our user take advantage of. We have looked at implementing the Max user sessions on the ACS however this does not seem to work for out scenario. Currently the ACS is configured Service selection rule :      match Radius -ANY- RADIUS-IETF:Called-Station-ID contains BYOD 802.1X_BYOD 802.1X_BYOD Authorisation : (System:EapTunnel match PEAP And AD-AD1:ExternalGroups contains any TestDomain/Users/BYOD TEST) Is there a way of implementing this as the devices are only authenticating against AD so limiting the logon's there has no impact as the devices are not actually logging on to the domain. Any suggestions or advice would be greatly appreciated. ... View more