Hi Sanron, Could you please send me your system diagnostic files for the DNS issue ? or open a case with SBCS. thanks Wei ... View more

Hi Ciscomax, We cannot reproduce this issue. Could you please send me your system diagnostic files ? or open a case with SBCS. thanks Wei ... View more

Hi, Please choose PPPoE for IP Address Assignment (WAN-Add/Edit window). You will see the 'Add VLAN Tag' option. Wei ... View more

Hi Erne, eicar files detection are for testing purpose only, ISA500 only detect those test files from www.eicar.org. Regards, Wei ... View more

Hi Brandon, you want a http option for captive portal ? Regards, Wei ... View more

Hi ciscomax, this is not an issue. I assume that you want to enable only the critical/high severity signatures for detection and block? What you did however is to display the critical/high signature, and this display cannot be saved, only configuration change can be saved, for example, disable a signature, change the action from block to log, etc. If you want to enable only critical high signatures, you can first change all signatures to log only,or disable state, then select critical/high signature to enable for block and log. Let me know if this is clear. Regards, Wei ... View more

Hi, Do you have specific steps to reproduce the issue ? I tried with the following steps, i do not see any issue, maybe a usability issue but not a capability/function issue: I tried to disable all web attack category signatures 1) select web attack from category 2) click refresh button on the IPS gui 3) click to select all web attack related signatures 4) click edit 5) uncheck 'enable detection of selected signatures' to disable those signatures     click ok for this pop up window 6) after clicking ok, i see that selected signatures become 'ALL' again instead of     just web attack category ones, however, if you check web attack category again     you will see that all those signatures are disabled 7) click save on IPS gui to save the change 8) check web attack category signatures result, change is saved, all web attack related signatures are disabled let me know your steps if it is not similar to mine. Regards, Wei ... View more

Hi, What is your firmware version ? Could you please send me your diagnostic files ? I do not have issue access https sites with Bonjour disabled. Regards, Wei ... View more

Hi Christian, ISA500 team is working on this issue. Could you please open a case to get the help from TAC engineers to troubleshoot and try out the fix ? Regards, Wei ... View more

HI, ISA500 team is investigating and working on this issue right now. Please try to disable, then re-enable one of those services to see if the security service can come online again(just disable/reenable one of them is good, web reputation, web url filtering, network reputation or spam filtering). Could you please open a TAC case to get help from tac engineers and try out the fix ? If you do not have a Service Contract for the ISA500, you can't open the case yourself.  However you can call the SBSC (Small Business Support Center) and speak with an engineer to open a case for you. http://www.cisco.com/en/US/support/tsd_cisco_small_business_support_center_contacts.html Regards, Wei ... View more

Hi BK, For the VPN performance issue, Could you please do a packet capture at ISA500 LAN port which connects to FTP server, when Client is doing the ftp download via VPN tunnel ? Please disable all security features for this. We want to check if the issue is related to the IP packet fragmentation caused by the vpn overhead, You can use ISA500 packet capture feature for this task (device management->diagnostic utilities->packet capture) FTP server-------[LAN]ISA500[WAN]---------Internet-----------Client PC                      capture here You can also try to lower the mtu of your FTP server to see if this helps. (I suggest to start with mtu = 1400 first) Regards, Wei ... View more