i had the same problem. we created a custom URL category to get around it. .download.microsoftupdates.com, .update.microsoft.com, .windowsupdate.microsoft.com, c.microsoft.com, download.microsoftupdates.com, download.windowsupdate.com, schemas.micro...
Web Usage Controls is what you want, it contains the 'Categories" you're used to seeing in the demo license. When we changed from a demo to full license, we "lost" these Categories.Security Services, Acceptable Use Controls. Edit Global Settings. E...
I didn't see a way to set a "fail closed" when the ASA can't hand-off WCCP to the WSA. You could use the firewall's built-in ACLs to manage this though.On the ASA: have an ACL that allows only the WSAs to the internet, denying the client/end-user su...
ironport doesn't have an equivilent of quota time. we switched from websense to ironport this year.for "time waste" websites like youtube, facebook, etc, that we had on quota time in websense, we configured them for the 'warning' action in access pol...