Hello all, I would like to know if the Visitor Policy feature is available con Cisco CMX 10.x, or when it would be available? I extracted this from the Cisco CVD CMX design guide, which is based on CMX 8.0: " The Visitor Policy section of CMX Connect & Engage allows an administrator to set different usage quotas to users based on the User Group to which the visitor belongs. The User Group, in turn, corresponds to the login type the visitor used when connecting via CMX Visitor Connect. By default, all visitors who do not login with a social connector via the CMX Visitor Connect splash page are put in the Basic group. The Basic group is allocated a usage quota of 300 Mbytes of data for each 24 hour period. Visitors who choose to login via a social connector are put in to Social group and allocated a usage quota of 3000 Mbytes of data for each 24 hour period. This can be used to encourage visitors to use social connectors with splash pages. The usage quotas may be easily edited by clicking the Visitor Policy tab on the CMX Connect & Engage dashboard," Thanks! ... View more

I was trying to get the MTBF values for the new access points Cisco Aironet 1700, 2700, 3700, but I wasn't able to find them anywhere. Does anyone know if this information is available? I also try with the Cisco IP Phones, but with no luck. Thanks. ... View more

Hello all, We have an Outlook web access server and I would like to block an attemt of bruteforcing its login page (SSL enabled). Is there any signature that can accomplish this? Thanks in advance ... View more

Hello All, I would like to assign Roles to users using external authentication via Radius (ACS 5.2). The Ironport user guide documentation saids that I have to map a Radius Class to a Role, but I dont know what attribute to add or modify in ACS 5.2 in order to make it work. Thanks in advance. ... View more

Hello All, We have deployed our Ironport WSA to authenticate users from different Domains via a unique Realm. This Realm, lets say "Corporate" has Trust Relationships to the Active Directory servers of each of its Partners. So the users are like: ParterA\user5, PartnerD\user2, PartnerB\user23, etc. The problem I'm facing is that I can't get the reports by Partners. If I get the Top URLs report, I get the combined Top URLs of all Partners, I cannot choose Top URLs of PartnerJ for example. Is there a way to accomplish this?? Maybe with the Ironport M-Series or a third party reporting tool?? Any advice would be appreciated. P.S.: Our WSA is version 7.1.3-021 Thanks! ... View more

Hello all, I would like to know where I can get the image to upgrade to WSA 7.5, I currently have an Ironport S370 versión 7.1.3-021. According to the release notes, my version should be able to upgrade directly to 7.5, however on System Administration > System Upgrade, I dont see the version 7.5 as available for me to do the upgrade, the only version available is 7.1.3-025 Thanks in advance!!! ... View more

Hi all, I was hoping someone could help me with this problem, I have a pair of ASAs in multiple context mode and in a failover configuration, the contexts share a "internet" interface which they use to go outside the world and also in the case one natted server from one context wants to talk to other natted  server in another context. This intra-context traffic has always work. However we have recently upgraded from version 8.2.2 to version 8.2.5, since then, communication between the contexts using the shared interface is not working. This is sample of the configuration CONTEXT-ADMIN interface GigabitEthernet0/2.1 mac-address 0016.001f.e251 standby 0016.001f.e252 nameif internet security-level 0 ip address X.Y.Z.2 255.255.255.0 standby X.Y.Z.252 ! CONTEXT-CTX1 interface GigabitEthernet0/2.1 mac-address 0016.001f.e241 standby 0016.001f.e242 nameif internet security-level 0 ip address X.Y.Z.241 255.255.255.0 standby X.Y.Z.242 ! as you can see, since this is a shared interface we set the mac-address of the interfaces, however with this version (8.2.5) it seems that one context can't see natted IPs from other contexts. For example I have natted a server on the CTX1 context with the public IP X.Y.Z.43, but from the ADMIN context I just can't see this IP, if I issue the show arp | i X.Y.Z.43 command, it gives me nothing. I also issue a capture command on the ADMIN context and I didnt see any traffic coming from the IP X.Y.Z.43 If I remove the mac-address command from both of the context, I also get no results, now I can see on the ARP tables the natted IPs of the other contexts, but It seem that the traffic gets stuck somewhere in the middle. I'm pretty sure this could be because of a bug, I have downgrade one of the firewalls and make it the ACTIVE one, this solve the problem. BUT I really would like to know if someone has face this issue and in what version this could be fixed. ... View more