We are having problems trying to identify why the WSA is blocking Slack calls.  We are seeing the following error...   SyslogAccess: Info: 1510782070.590 0 10.129.X.X TCP_DENIED/407 0 CONNECT tunnel://slack-calls-0f839364977b8qwdsc8.slack-core.com:443/ - NONE/- - OTHER-NONE-DefaultGroup-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-",-,-,"-"> - NONE, "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) AtomShell/2.8.2 Chrome/56.0.2924.87 AtomShell/1.6.15 Safari/537.36 Slack_SSB/2.8.2 Slack_SSB/2.8.2 Slack_SSB/2.8.2" N   My first question is whether anyone knows the definitions of the fields in the WSA log format?     My 2nd question is what is causing this to be denied?    This site is explicitly allowed and works for other users.          ... View more

We are trying to connect to our slack instance but we are getting the following error..   Sep 5 19:02:40 host SyslogAccess: Info: 1504638160.662 4 10.137.144.175 TCP_DENIED/407 0 CONNECT tunnel://xxxx.slack.com:443/ - NONE/- - OTHER-NONE-VPN_Users-NONE-NONE-NONE-NONE <-,-,-,"-",-,-,-,-,"-",-,-,-,"-",-,-,"-","-",-,-,-,-,"-","-","-","-","-","-",0.00,0,-,"-","-",-,"-",-,-,"-","-"> -   Why am I not getting any details on why it is denying the connection? ... View more

Does anyone know the best RegEx String to use to block Windows XP machines from being able to go to the Internet via an Ironport user agent filter? ... View more

Perhaps someone can help us out a little bit.  We have a Nexus switch that is connected to a bunch of servers and has an upstream connection to our core.  For some reason we see the switch transmitting a lot of jumbo packets despite the fact that none of the servers are sending jumbo packets. In fact the egress port doesn't see any inbound jumbo packets.. Ethernet1/15 is up   Hardware: 1000/10000 Ethernet, address: f866.f27d.6fe4 (bia f866.f27d.6fe4)   MTU 1500 bytes, BW 10000000 Kbit, DLY 10 usec,      reliability 255/255, txload 1/255, rxload 1/255   Encapsulation ARPA   Port mode is trunk   full-duplex, 10 Gb/s, media type is 10g   Input flow-control is off, output flow-control is off   Rate mode is dedicated   Switchport monitor is off   Last link flapped 1week(s) 3day(s)   Last clearing of "show interface" counters never   1 minute input rate 30267072 bits/sec, 21384 packets/sec   1 minute output rate 41052528 bits/sec, 20295 packets/sec   Rx     141428733917 input packets 117006081538 unicast packets 24404722805 multicast packets     17933114 broadcast packets 0 jumbo packets 0 storm suppression packets     20710996269479 bytes   Tx     134309200288 output packets 15170283276 multicast packets     32333 broadcast packets 3234301155 jumbo packets     23749465522981 bytes     0 input error 0 short frame 0 watchdog     0 no buffer 0 runt 0 CRC 0 ecc     0 overrun  0 underrun 0 ignored 0 bad etype drop     0 bad proto drop 0 if down drop 0 input with dribble     76208 input discard     0 output error 0 collision 0 deferred     0 late collision 0 lost carrier 0 no carrier     0 babble     0 Rx pause 0 Tx pause How can this be?  Why is it sending jumbo packets?  Is it somehow combing multiple Ethernet packets together? ... View more

Hey folks, So I'm trying to figure out a way where I can block a specific URL on a web server.   I can create filters for the host name of course but I'm trying to figure out how to block www.example.com/blah/index.html for instance while leaving www.example.com open in general. Can anyone help me out with this? ... View more

Hey folks, We are in the process of upgrading from ACS 4.2 to 5.3.  Most things seem to be working but we are having some major issues with the Rancid configuration tool.   I can log into devices using CLI login with the credentials that Rancid uses but Rancid fails login. This worked fine with our 4.2 implementation but not the 5.3.  Presumably I need to make a chance in the expect scripts because the new ACS server sends a different string but I have no idea what it is supposed to be.   I'm not an expert on Rancid so I apologize for my ignorance.  ... View more

Hey guys, I'm having a problem with my UC installation. Everything seems to be working up until I get to the remote patch configuration.  I enter in valid information but apparently the OS doesn't even try to connect to the SFTP server. It just fails saying bad password. Also it appears that I can't reach the server off network(the SFTP server is on the same network). Is this a VMWare issue?  Anyone seens this before? ... View more