Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Cisco Community
- :
- About hashimwajid1
Online
hashimwajid1
Member since
05-24-2017
Beginner
07-16-2019
01:49 PM
Hi can we configure WCCP with HSRP in cisco switches. we have 2 x switches and 2 x wsa and each WSA will be connecting with each swicth and we want yo run HSRP however i have couple Query 1- will WCCP work with HSRP ? 2- is there any disadvantage of configuring HSRP and WCCP together ?
... View more
Labels:
07-12-2019
06:49 AM
Hi Rahul, Thanks ACL are applied to Interfaces security level is 0 fro both DMZ and Outside all interfaces are up show run | inc access-group access-group Outside_access_in in interface Outside access-group Dmz_access_in in interface Dmz access-group Inside_access_in in interface Inside show nameif Interface Name Security GigabitEthernet0/0 Outside 0 GigabitEthernet0/1 Dmz 0 GigabitEthernet0/2 Inside 100 show run | inc same-security same-security-traffic permit inter-interface same-security-traffic permit intra-interface
... View more
07-12-2019
05:27 AM
hi guys, we are facing issue with our ASA 5515x which was working fine but after enabling Unicast Reverse Path Forwarding and removing some weak encryption/hashing Transform-set, now all traffic is being blocked by Implicit Deny rule from all interfaces. i've disabled the URPF and configured back the other protocols a but still no traffic is coming/outgoing and Anyconnect also stopped working. there is no hit on permit ip any any rule and all traffic is being deny by Implicit Deny rule. sh run access-list Inside_access_in access-list Inside_access_in extended permit ip any any show access-list Inside_access_in access-list Inside_access_in; 1 elements; name hash: 0xa231c4d3 access-list Inside_access_in line 1 extended permit ip any any (hitcnt=0) 0xe42c5ef9 show run access-list Dmz_access_in access-list Dmz_access_in extended permit ip any any show access-list Dmz_access_in access-list Dmz_access_in; 1 elements; name hash: 0xb5611b21 access-list Dmz_access_in line 1 extended permit ip any any (hitcnt=0) 0x623158d6 Packet tracer from Inside to DMZ packet-tracer input inside tcp 10.12.14.233 2000 192.168.4.5$ Phase: 1 Type: ROUTE-LOOKUP Subtype: Resolve Egress Interface Result: ALLOW Config: Additional Information: found next-hop 192.168.4.5 using egress ifc Dmz Phase: 2 Type: ACCESS-LIST Subtype: Result: DROP Config: Implicit Rule Additional Information: Forward Flow based lookup yields rule: in id=0x2aaacaa74570, priority=501, domain=permit, deny=true hits=39497, user_data=0x9, cs_id=0x0, reverse, flags=0x0, protocol=0 src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=any dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=any, dscp=0x0 input_ifc=Inside, output_ifc=any Result: input-interface: Inside input-status: up input-line-status: up output-interface: Dmz output-status: up output-line-status: up Action: drop Drop-reason: (acl-drop) Flow is denied by configured rule Packet tracer from Inside to Outside packet-tracer input inside tcp 10.12.14.233 2000 8.8.8.8 80 $ Phase: 1 Type: ROUTE-LOOKUP Subtype: Resolve Egress Interface Result: ALLOW Config: Additional Information: found next-hop 151.253.72.140 using egress ifc Outside Phase: 2 Type: ACCESS-LIST Subtype: Result: DROP Config: Implicit Rule Additional Information: Forward Flow based lookup yields rule: in id=0x2aaacaa74570, priority=501, domain=permit, deny=true hits=39901, user_data=0x9, cs_id=0x0, reverse, flags=0x0, protocol=0 src ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=any dst ip/id=0.0.0.0, mask=0.0.0.0, port=0, tag=any, dscp=0x0 input_ifc=Inside, output_ifc=any Result: input-interface: Inside input-status: up input-line-status: up output-interface: Outside output-status: up output-line-status: up Action: drop Drop-reason: (acl-drop) Flow is denied by configured rule
... View more
Labels:
07-10-2019
12:35 AM
Hi We are able to access via Console ( it did not ask about username/passswrod and only enable password was sufficient. Regards
... View more
07-10-2019
12:32 AM
Hi Balaji, Thanks for the advise, is there any way that i can make policy on Perimeter Firewall for the subnets (LAN/Original Subnet) which is coming via WSA. we want to make some PBR on the base of Original subnets which are coming via Proxy (usually Perimeter Firewall only knows WSA IP) is their any configuration to achieve this on WSA so its sends original source as well ? Thanks
... View more
07-08-2019
10:50 PM
Hi Marven, Thanks for your Reply i found this guide in witch it says Users from console are never locked down due to Password Expiration Password-Policy lifetime days (Optional) Sets the interval in days after which passwords expire for remote users (SSH, Telnet, HTTP); users at the console port are never locked out due to password expiration. Valid values are between 0 and 65536 days. The default value is 0 days, a value indicating that passwords will never expire. 7 days before the password expires, a warning message appears. After the password expires, system access is denied to remote users. To gain access after expiration, do one of the following: Have another administrator change your password with the username command. Log in to the physical console port to change your password. https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/admin_management.html I'll try it from console if not then it'll be a issue, you are right it might depends whether console login required local username/password database or not
... View more
07-08-2019
09:03 PM
Hi our ASA 5515x password expired due to password Expiry limitation and unfortunately no service password-recovery command is enabled. is there any way we can recover password ? with or without losing existing configuration when we login on ASA it shows Password Expired or do we have to contact with TAC ? do password-policy lifetime command also expires Console password or it just work for username/password ? if we connect console on ASA then Enable password will still work ? Regards
... View more
Labels:
07-07-2019
09:31 PM
Hi Balaji, Thanks for detailed answers. With https decryption enabled, Sites are opening but images are not downloading. With http its fine but issue with https decryption that images not downloading Is this normal behaviour of https decryption ?
... View more
07-07-2019
03:02 AM
Hi Balaji, this issue solved, actually Port was blocked in Protocol and user Agent by default and i was using Global Setting wo it was being denied. i'have 2 queries 1- we have 2 proxies, can we do Active and Standby in WCCP/transparent Scenario ? 2- we want to do only Users Identitification not the authentication,but i dont see any option for User Identification only Thanks
... View more
07-07-2019
02:06 AM
Hi Balaji, here is the detail of Logs proxy1.dtcmdomain.com> grep Currently configured logs: 1. "accesslogs" Type: "Access Logs" Retrieval: FTP Poll 2. "amp_logs" Type: "AMP Engine Logs" Retrieval: FTP Poll 3. "archiveinspect_logs" Type: "ArchiveInspect Logs" Retrieval: FTP Poll 4. "audit_logs" Type: "Audit Logs" Retrieval: FTP Poll 5. "authlogs" Type: "Authentication Framework Logs" Retrieval: FTP Poll 6. "avc_logs" Type: "AVC Engine Logs" Retrieval: FTP Poll 7. "bypasslogs" Type: "Proxy Bypass Logs" Retrieval: FTP Poll 8. "cli_logs" Type: "CLI Audit Logs" Retrieval: FTP Poll 9. "configdefragd_logs" Type: "Configuration Logs" Retrieval: FTP Poll 10. "dca_logs" Type: "DCA Engine Logs" Retrieval: FTP Poll 11. "external_auth_logs" Type: "External Authentication Logs" Retrieval: FTP Poll 12. "feedback_logs" Type: "Feedback Logs" Retrieval: FTP Poll 13. "feedsd_logs" Type: "Feedsd Logs" Retrieval: FTP Poll 14. "fips_logs" Type: "FIPS Logs" Retrieval: FTP Poll 15. "ftpd_logs" Type: "FTP Server Logs" Retrieval: FTP Poll 16. "gui_logs" Type: "GUI Logs" Retrieval: FTP Poll 17. "haystackd_logs" Type: "Haystack Logs" Retrieval: FTP Poll 18. "httpslog" Type: "HTTPS Logs" Retrieval: FTP Poll 19. "hybridd_logs" Type: "Hybrid Service Logs" Retrieval: FTP Poll 20. "idsdataloss_logs" Type: "Data Security Logs" Retrieval: FTP Poll 21. "logderrorlogs" Type: "Logging Logs" Retrieval: FTP Poll 22. "mcafee_logs" Type: "McAfee Logs" Retrieval: FTP Poll 23. "musd_logs" Type: "AnyConnect Secure Mobility Daemon Logs" Retrieval: FTP Poll 24. "ocspd_logs" Type: "OCSP Logs" Retrieval: FTP Poll 25. "pacd_logs" Type: "PAC File Hosting Daemon Logs" Retrieval: FTP Poll 26. "policyinspectord_logs" Type: "Policy Inspector Logs" Retrieval: FTP Poll 27. "proxylogs" Type: "Default Proxy Logs" Retrieval: FTP Poll 28. "reportd_logs" Type: "Reporting Logs" Retrieval: FTP Poll 29. "reportqueryd_logs" Type: "Reporting Query Logs" Retrieval: FTP Poll 30. "saas_auth_log" Type: "SaaS Auth Logs" Retrieval: FTP Poll 31. "shd_logs" Type: "SHD Logs" Retrieval: FTP Poll 32. "sl_usercountd_logs" Type: "SL Usercount Logs" Retrieval: FTP Poll 33. "smartlicense" Type: "Smartlicense Logs" Retrieval: FTP Poll 34. "snmp_logs" Type: "SNMP Logs" Retrieval: FTP Poll 35. "sntpd_logs" Type: "NTP Logs" Retrieval: FTP Poll 36. "sophos_logs" Type: "Sophos Logs" Retrieval: FTP Poll 37. "sse_connectord_logs" Type: "SSE Connector Daemon Logs" Retrieval: FTP Poll 38. "status" Type: "Status Logs" Retrieval: FTP Poll 39. "system_logs" Type: "System Logs" Retrieval: FTP Poll 40. "trafmon_errlogs" Type: "Traffic Monitor Error Logs" Retrieval: FTP Poll 41. "trafmonlogs" Type: "Traffic Monitor Logs" Retrieval: FTP Poll 42. "uds_logs" Type: "UDS Logs" Retrieval: FTP Poll 43. "updater_logs" Type: "Updater Logs" Retrieval: FTP Poll 44. "upgrade_logs" Type: "Upgrade Logs" Retrieval: FTP Poll 45. "wbnp_logs" Type: "WBNP Logs" Retrieval: FTP Poll 46. "webcat_logs" Type: "Web Categorization Logs" Retrieval: FTP Poll 47. "webrootlogs" Type: "Webroot Logs" Retrieval: FTP Poll 48. "webtapd_logs" Type: "Webtapd Logs" Retrieval: FTP Poll 49. "welcomeack_logs" Type: "Welcome Page Acknowledgement Logs" Retrieval: FTP Poll Enter the number of the log you wish to grep. []> 1 Enter the regular expression to grep. []> express.com Do you want this search to be case insensitive? [Y]> Do you want to search for non-matching lines? [N]> Do you want to tail the logs? [N]> Do you want to paginate the output? [N]> 1562478703.918 3 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562478704.035 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562480147.922 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562480147.936 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562480148.904 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562480148.916 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483801.229 377 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483801.229 376 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483801.315 26 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483801.315 25 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483809.373 26 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483809.373 26 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483811.521 25 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483811.521 25 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483811.735 213 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483811.784 49 172.27.27.10 TCP_DENIED_SSL/403 0 GET https://www.express.com:443/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483811.867 0 172.27.27.10 TCP_DENIED_SSL/403 0 GET https://www.express.com:443/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562486377.154 1324 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562486377.157 1326 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562486377.376 217 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562486377.427 50 172.27.27.10 TCP_DENIED_SSL/403 0 GET https://www.express.com:443/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562486377.509 50 172.27.27.10 TCP_DENIED_SSL/403 0 GET https://www.express.com:443/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562487005.377 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562487005.453 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562487005.605 229 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WARS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - proxy1.dtcmdomain.com> proxy1.dtcmdomain.com> proxy1.dtcmdomain.com>
... View more
07-07-2019
02:03 AM
Hi Balaji, here is the detail of Logs proxy1.dtcmdomain.com> grep Currently configured logs: 1. "accesslogs" Type: "Access Logs" Retrieval: FTP Poll 2. "amp_logs" Type: "AMP Engine Logs" Retrieval: FTP Poll 3. "archiveinspect_logs" Type: "ArchiveInspect Logs" Retrieval: FTP Poll 4. "audit_logs" Type: "Audit Logs" Retrieval: FTP Poll 5. "authlogs" Type: "Authentication Framework Logs" Retrieval: FTP Poll 6. "avc_logs" Type: "AVC Engine Logs" Retrieval: FTP Poll 7. "bypasslogs" Type: "Proxy Bypass Logs" Retrieval: FTP Poll 8. "cli_logs" Type: "CLI Audit Logs" Retrieval: FTP Poll 9. "configdefragd_logs" Type: "Configuration Logs" Retrieval: FTP Poll 10. "dca_logs" Type: "DCA Engine Logs" Retrieval: FTP Poll 11. "external_auth_logs" Type: "External Authentication Logs" Retrieval: FTP Poll 12. "feedback_logs" Type: "Feedback Logs" Retrieval: FTP Poll 13. "feedsd_logs" Type: "Feedsd Logs" Retrieval: FTP Poll 14. "fips_logs" Type: "FIPS Logs" Retrieval: FTP Poll 15. "ftpd_logs" Type: "FTP Server Logs" Retrieval: FTP Poll 16. "gui_logs" Type: "GUI Logs" Retrieval: FTP Poll 17. "haystackd_logs" Type: "Haystack Logs" Retrieval: FTP Poll 18. "httpslog" Type: "HTTPS Logs" Retrieval: FTP Poll 19. "hybridd_logs" Type: "Hybrid Service Logs" Retrieval: FTP Poll 20. "idsdataloss_logs" Type: "Data Security Logs" Retrieval: FTP Poll 21. "logderrorlogs" Type: "Logging Logs" Retrieval: FTP Poll 22. "mcafee_logs" Type: "McAfee Logs" Retrieval: FTP Poll 23. "musd_logs" Type: "AnyConnect Secure Mobility Daemon Logs" Retrieval: FTP Poll 24. "ocspd_logs" Type: "OCSP Logs" Retrieval: FTP Poll 25. "pacd_logs" Type: "PAC File Hosting Daemon Logs" Retrieval: FTP Poll 26. "policyinspectord_logs" Type: "Policy Inspector Logs" Retrieval: FTP Poll 27. "proxylogs" Type: "Default Proxy Logs" Retrieval: FTP Poll 28. "reportd_logs" Type: "Reporting Logs" Retrieval: FTP Poll 29. "reportqueryd_logs" Type: "Reporting Query Logs" Retrieval: FTP Poll 30. "saas_auth_log" Type: "SaaS Auth Logs" Retrieval: FTP Poll 31. "shd_logs" Type: "SHD Logs" Retrieval: FTP Poll 32. "sl_usercountd_logs" Type: "SL Usercount Logs" Retrieval: FTP Poll 33. "smartlicense" Type: "Smartlicense Logs" Retrieval: FTP Poll 34. "snmp_logs" Type: "SNMP Logs" Retrieval: FTP Poll 35. "sntpd_logs" Type: "NTP Logs" Retrieval: FTP Poll 36. "sophos_logs" Type: "Sophos Logs" Retrieval: FTP Poll 37. "sse_connectord_logs" Type: "SSE Connector Daemon Logs" Retrieval: FTP Poll 38. "status" Type: "Status Logs" Retrieval: FTP Poll 39. "system_logs" Type: "System Logs" Retrieval: FTP Poll 40. "trafmon_errlogs" Type: "Traffic Monitor Error Logs" Retrieval: FTP Poll 41. "trafmonlogs" Type: "Traffic Monitor Logs" Retrieval: FTP Poll 42. "uds_logs" Type: "UDS Logs" Retrieval: FTP Poll 43. "updater_logs" Type: "Updater Logs" Retrieval: FTP Poll 44. "upgrade_logs" Type: "Upgrade Logs" Retrieval: FTP Poll 45. "wbnp_logs" Type: "WBNP Logs" Retrieval: FTP Poll 46. "webcat_logs" Type: "Web Categorization Logs" Retrieval: FTP Poll 47. "webrootlogs" Type: "Webroot Logs" Retrieval: FTP Poll 48. "webtapd_logs" Type: "Webtapd Logs" Retrieval: FTP Poll 49. "welcomeack_logs" Type: "Welcome Page Acknowledgement Logs" Retrieval: FTP Poll Enter the number of the log you wish to grep. []> 1 Enter the regular expression to grep. []> express.com Do you want this search to be case insensitive? [Y]> Do you want to search for non-matching lines? [N]> Do you want to tail the logs? [N]> Do you want to paginate the output? [N]> 1562478703.918 3 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562478704.035 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562480147.922 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562480147.936 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562480148.904 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562480148.916 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483801.229 377 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483801.229 376 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483801.315 26 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483801.315 25 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483809.373 26 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483809.373 26 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483811.521 25 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483811.521 25 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483811.735 213 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483811.784 49 172.27.27.10 TCP_DENIED_SSL/403 0 GET https://www.express.com:443/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562483811.867 0 172.27.27.10 TCP_DENIED_SSL/403 0 GET https://www.express.com:443/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562486377.154 1324 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562486377.157 1326 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562486377.376 217 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562486377.427 50 172.27.27.10 TCP_DENIED_SSL/403 0 GET https://www.express.com:443/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562486377.509 50 172.27.27.10 TCP_DENIED_SSL/403 0 GET https://www.express.com:443/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562487005.377 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/ - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562487005.453 0 172.27.27.10 TCP_DENIED/403 0 GET http://www.express.com/favicon.ico - NONE/- - BLOCK_ADMIN_PROTOCOL_12-TEST_Policy-TEST_Profile-NONE-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - 1562487005.605 229 172.27.27.10 TCP_MISS_SSL/200 0 TCP_CONNECT 23.208.229.214:443 - DIRECT/www.express.com - DECRYPT_WBRS_7-TEST-TEST_Profile-NONE-NONE-NONE-DefaultGroup-NONE <IW_shop,2.6,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,IW_shop,-,"-","Shopping","-","Unknown","Unknown","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-",-> - proxy1.dtcmdomain.com> proxy1.dtcmdomain.com> proxy1.dtcmdomain.com>
... View more
07-07-2019
12:38 AM
hi Balaji, you are right, i enabled L2 Forwarding and it started redirecting toward WSA, however i am facing one issue although all HTTP and HTTPS traffic is redirecting toward WSA but WSA still Blocking and when i do trace on WSA i am getting below error User Information User Name: None Authentication Realm Group Membership: None Secure Group Tag Membership: None User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.100 Safari/537.36 Policy Match Cisco Data Security policy: None Decryption policy: None Routing policy: None Identification Profile: TEST_Profile Access policy: TEST_Policy Final Result Request blocked Details: Protocol blocked based on applications settings in Access policy Trace session complete i checked on Access policies and access policies is using default allow (all is monitored)
... View more
07-04-2019
02:56 AM
Hi Balaji, PFB show ip wccp web-cache detail The WCCP service specified does not exist. show version Cisco IOS XE Software, Version 16.09.03 Cisco IOS Software [Fuji], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 16.9.3, RELEASE SOFTWARE (fc2) Technical Support: http://www.cisco.com/techsupport Copyright (c) 1986-2019 by Cisco Systems, Inc. Compiled Wed 20-Mar-19 08:02 by mcpre Cisco IOS-XE software, Copyright (c) 2005-2019 by cisco Systems, Inc. All rights reserved. Certain components of Cisco IOS-XE software are licensed under the GNU General Public License ("GPL") Version 2.0. The software code licensed under GPL Version 2.0 is free software that comes with ABSOLUTELY NO WARRANTY. You can redistribute and/or modify such GPL code under the terms of GPL Version 2.0. For more details, see the documentation or "License Notice" file accompanying the IOS-XE software, or the applicable URL provided on the flyer accompanying the IOS-XE software. ROM: IOS-XE ROMMON BOOTLDR: System Bootstrap, Version 16.9.1r [FC2], RELEASE SOFTWARE (P) DTCM-Core-SW uptime is 7 weeks, 3 days, 14 hours, 58 minutes Uptime for this control processor is 7 weeks, 3 days, 15 hours, 2 minutes System returned to ROM by Reload Command System restarted at 22:49:16 GMT Sun May 12 2019 System image file is "flash:packages.conf" Last reload reason: Reload Command This product contains cryptographic features and is subject to United States and local country laws governing import, export, transfer and use. Delivery of Cisco cryptographic products does not imply third-party authority to import, export, distribute or use encryption. Importers, exporters, distributors and users are responsible for compliance with U.S. and local country laws. By using this product you agree to comply with applicable laws and regulations. If you are unable --More-- to comply with U.S. and local laws, return this product immediately. --More-- --More-- A summary of U.S. laws governing Cisco cryptographic products may be found at: http://www.cisco.com/wwl/export/crypto/tool/stqrg.html If you require further assistance please contact us by sending email to export@cisco.com. Technology Package License Information: ------------------------------------------------------------------------------ Technology-package Technology-package Current Type Next reboot ------------------------------------------------------------------------------ network-advantage Smart License network-advantage dna-advantage Subscription Smart License dna-advantage Smart Licensing Status: UNREGISTERED/EVAL MODE cisco C9500-40X (X86) processor with 1419496K/6147K bytes of memory. Processor board ID FCW2250F0DB 40 Virtual Ethernet interfaces 96 Ten Gigabit Ethernet interfaces 4 Forty Gigabit Ethernet interfaces 2048K bytes of non-volatile configuration memory. 16777216K bytes of physical memory. 1638400K bytes of Crash Files at crashinfo:. 11264000K bytes of Flash at flash:. 0K bytes of WebUI ODM Files at webui:. 1638400K bytes of Crash Files at crashinfo-2:. 11264000K bytes of Flash at flash-2:. Base Ethernet MAC Address : 00:2f:5c:03:12:00 Motherboard Assembly Number : 73-18140-03 Motherboard Serial Number : FOC22490QLM Model Revision Number : D0 Motherboard Revision Number : B0 --More-- Model Number : C9500-40X Switch Ports Model SW Version SW Image Mode ------ ----- ----- ---------- ---------- ---- * 1 50 C9500-40X 16.9.3 CAT9K_IOSXE INSTALL 2 50 C9500-40X 16.9.3 CAT9K_IOSXE INSTALL Switch 02 --------- Switch uptime : 7 weeks, 3 days, 15 hours, 1 minute Base Ethernet MAC Address : 00:2f:5c:02:b0:00 Motherboard Assembly Number : 73-18140-03 Model Revision Number : D0 Motherboard Revision Number : B0 Model Number : C9500-40X Configuration register is 0x102 sh ip wccp Global WCCP information: Router information: Router Identifier: 192.168.128.1 Service Identifier: 50 Protocol Version: 2.01 Number of Service Group Clients: 0 Number of Service Group Routers: 0 Total Packets Redirected: 0 Process: 0 CEF: 0 Platform: 0 Service mode: Open Service Access-list: -none- Total Packets Dropped Closed: 0 Redirect access-list: 110 Total Packets Denied Redirect: 0 Total Packets Unassigned: 0 Group access-list: WSA_IP Total Messages Denied to Group: 0 Total Authentication failures: 0 Total GRE Bypassed Packets Received: 0 Process: 0 CEF: 0 Platform: 0 sh ip wccp 50 detail WCCP Client information: WCCP Client ID: 172.28.0.4 Protocol Version: 2.01 State: NOT Usable (Incompatible redirection method) Redirection: GRE Packet Return: GRE Assignment: MASK Connect Time: 20:17:01 Mask Allotment: None
... View more
07-03-2019
11:29 AM
hi guys i am trying to do WCCP redirection on catalyst 9500 switch for 2 x WSA but after configuring WCCP on Switch i am not able to redirect traffic. when we do "sh ip wccp 50 detail" its gives error not usable (incompatible redirection method) i do not see any GRE tunnel coming up my wccp configuration are below Access-list 110 permit tcp 172.27.27.0 0.0.0.255 any eq 80 ip access-list standard WSA_IP permit 172.28.0.4 permit 172.28.0.5 Ip wccp 50 redirect-list 110 group-list list WSA_IP password cisco Int vlan 270 Ip wccp 50 redirect in
... View more
- Tags:
- wsa
Labels:
Created by
hashimwajid1
in Web Security
in Web Security
06-19-2019
11:57 PM
06-19-2019
11:57 PM
Hi Ken, is there any way we can do this for Guest same like PAC file via DHCP/GP ? so guest should download it when they connect automatically or there browser download it automatically before proceeding.
... View more
Tuesday
Hi can we configure WCCP with HSRP in cisco switches. we have 2 x
switches and 2 x wsa and each WSA ...
a week ago
Hi Rahul,ThanksACL are applied to Interfacessecurity level is 0 fro both
DMZ and Outsideall interfac...
a week ago
hi guys, we are facing issue with our ASA 5515x which was working fine
but after enabling Unicast Re...
2 weeks ago
Hi We are able to access via Console ( it did not ask about
username/passswrod and only enable passw...
2 weeks ago
Hi Balaji, Thanks for the advise, is there any way that i can make
policy on Perimeter Firewall for ...
2 weeks ago
Hi Marven, Thanks for your Reply i found this guide in witch it says
Users from console are never lo...
2 weeks ago
Hi our ASA 5515x password expired due to password Expiry limitation and
unfortunately no service pas...
2 weeks ago
Hi Balaji,Thanks for detailed answers.With https decryption enabled,
Sites are opening but images ar...
2 weeks ago
Hi Balaji, this issue solved, actually Port was blocked in Protocol and
user Agent by default and i ...
2 weeks ago
Hi Balaji, here is the detail of Logs proxy1.dtcmdomain.com>
grepCurrently configured logs:1. "acces...
2 weeks ago
Hi Balaji, here is the detail of Logs proxy1.dtcmdomain.com>
grepCurrently configured logs:1. "acces...
2 weeks ago
hi Balaji, you are right, i enabled L2 Forwarding and it started
redirecting toward WSA, however i a...
2 weeks ago
Hi Balaji, PFB show ip wccp web-cache detailThe WCCP service specified
does not exist. show versionC...
Public Statistics
| Date Registered | 05-24-2017 11:54 AM |
| Date Last Visited | 07-20-2019 01:36 AM |
| Total Messages Posted | 143 |
| Total Helpful Votes Received | 5 |
Helpful Votes Given To
| User | Helpful Count |
|---|---|
| 15 | |
| 15 | |
| 5 | |
| 5 | |
| 5 |
.jpg "VIP Advisor"){kind=icon}
.jpg "Hall of Fame Cisco Employee"){kind=icon}
