Hi Folks,   Can anyone tell me if it is possible to allow ssh access out to aws as a whole, without having to allow ssh traffic out to the whole internet.   We are a 3rd level institute that needs to allow our students ssh out to AWS. As we get the service for free we do not have any elastic ips or set ranges that our users are directed to.    Cheers ... View more

Hi guys, I am looking to utilize the load balancing feature of ITD on our 2 * Nexus 95k.  I want it host a VIP with two nodes behind it which will then share the traffic.  This is the config that I have come up with and just wanted to see if their were any holes in it.  Vlan 400 is the vlan that these addresses live on and there is an harp address of 10.1.4.250 itd device-group mailservers Probe icmp Node 10.1.4.1 Node 10.1.4.2   Itd ExchangeLBPOL Device-group mailservers Ingress interface Vlan400 Virtual ip 10.1.4.3 255.255.255.255 Failaction node reassign Load-balance buckets 8 No shut This config will be placed on both Nexus 95k. Any help greatly appreciated. Thanks ... View more

Folks, Hope u guys can help with this. We have 2 vlans, VLAN20 192.168.1.0/24 and VLAN21 192.168.2.0/24 On the 192.168.1.0/24 subnet we have an extended acl inbound. There is no acl on VLAN21 I want to allow clients on VLAN21 to access a server 192.168.1.10 on VLAN20 on tcp port 7788. This is what i have in the ACL access-list 121 permit tcp host 192.168.1.10 192.168.2.0 0.0.0.255 eq 7788 log   With the above applied, the connection fails. If i change the ACL to " access-list 121 permit tcp host 192.168.1.10 192.168.2.0 0.0.0.255 gt 7000 log" it works The only thing i am noticing when i look in the log, is that the source port from the client is 64534. Is there any way to get this working without leaving the ACL as is above, and tying it down a bit more. Regards ... View more

Hi Guys, Is there anyway of exporting a web policy to csv so that it can be presented to Management. Also would be handy for circulation to team members. Cheers                    ... View more

Hi Guys, Our issue here is that when we run a policy trace on any of our AD users - it doesnt seem to pull any group information and does not match any policies either. However if i try access an URL like www.google.ie and monitor the activity from the cli - i cann see that the user has in fact had certain policies applied to it. Does anyone have any suggestions as to how resolve this. Running the command testauthconfig - completes successfully. Cheers ... View more

Hi Folks, Can someone point me in the right direction heer. I have a WLS box - i want to create a WLAN which will           1.)     allow anyone to connect to without authentication.           2.)     once connected they need to be redirected to a web server for further instructions. Any suggestions greatly appreciated. Cheers ... View more

Folks, We currently have 2*S series box's performing our proxy and web filtering service. This works fine for users on our LAN. We also have some other segregated LANS that we would also like their web requests to be filtered. Historically we were able to accomplish this by entering our Websense Server IP in the "URL Filtering Servers" section of the ASA. This meant all url requests were first sent to our websense server before being returned to the end user. Is this functionality available with our current Ironport setup. Regards ... View more