Also added to 12.0 are STIX/TAXXI feeds, so you can use other sources of intelligence: Alienvault, Anomoli, HailATaxxi, or generate your own. ... View more

What ports to send over is defined in the config of the WSA, when it "subscribes" to the WCCP. ... View more

Here's my list that I put in a category that doesn't require auth or decryption:   .apps.microsoft.com .delivery.mp.microsoft.com .download.windowsupdate.com .update.microsoft.com .windowsupdate.com .ws.microsoft.com apps.microsoft.com aq.v4.a.dl.ws.microsoft.com crl.microsoft.com login.microsoftonline.com watson.telemetry.microsoft.com   The cert that the WSA is missing is titled "Microsoft Root Certificate Authority 2011"   ... View more

I have a list of sites we put in a custom category that is set to not require authentication and also set to not require decryption. I will post it here in a couple of hours. Also, while running the beta for 11.7, we ran into an issue with one of the the root certs that MS is using not being trusted. And this was specifically Office activation (though not O365). So tail the access log for a specific ip and try to activate office and see if NJ its having decryption issues. And finally, there's an option in the creation of a custom category to point the WSA at the MS endpoint to download the list. 11.5 can make the api call, not just the older XML download. ... View more

Dynamic Service Range. You can pick any 8 ports you want. I actually run my production WSA using WCCP for 80, 443, 8080 and 8443 using service group #90 Ken ... View more

Oops! https://www.cisco.com/c/en/us/support/docs/security/adaptive-security-appliance-asa-software/116046-config-wccp-asa-00.html ... View more

Yep. https://www.washingtonpost.com/opinions/2018/12/05/we-finally-found-voter-fraud/?noredirect=on&utm_term=.708f6dc408ad I am often in the WSA beta programs so I've used most of 90-97 at one time or another. ... View more

That's really a function of the hardware you're using on either end. Assuming you're using a ASA as the router, you can use 90-97. ... View more

@marcio.tormente wrote: Hello Balaji,   thanks for your support. What is the difference between option 1 and 2? I didn´t see difference. In the log I saw one strange thing: "ALLOW_CUSTOMCAT_12-HP_NAC_agents-Sitel_NAC_Authentication-DefaultGroup-NONE-NONE-DefaultGroup-NONE" I didn´t understand why appear DefaultGroup. In the Internet Explorer appear as "connection refused", without proxy works fine.   Run grep in a command line, and look at the list of log files, pick the Access log.   If you have added any log subscriptions, the access logs won't necessarily be #1 any more.   Show us the whole log entry...   ... View more

Smart licensing isn't released for WSA yet...it's coming in 11.7 That beta just finished, I'm not sure when FCS is scheduled. ... View more

To have the best luck make sure the AsyncOS version matches, as well as the versions of the CASE engine and other content scanning engines. ... View more