Web Security

Hi Everyone, I am performing an offline upgrade for Cisco WSA. I am trying to download firmware package from http://updates.ironport.com/fetch_manifest.html. and the download link is not working. I just wanna check if there's an alternate site to dow...

Hi what is the recommended asyncOS for  "Secure Web Virtual Appliance S300V" i work with 15.x , and it is OK for me, but i need to know what is the recommended by cisco. yaron

I'm trying to disable SOCKS5 on my APIC due the libcurl heavy buffer overflow vulnerabilitie. I'm not sure if the proxy even exists on the APIC. I only found the http and https. Any ideas?

Dear community, I would like to know if on a Web Security Appliance On Prem it is possible to block executable file included in pdf or docx files? I can block exe downlaod, but looks that when the exe is included users can download them! Thank you

Hi All, I have generated certificate from wsa appliance .pem format and same using on client machine under trusted root certificate. Can i use that certificate for https decryption or need to have CA signed or AD signed certificate. Pls note- User id...

has anyone done WSA onprem to umbrella SIG migration. How to get the Identification Profiles, Access Policies from WSA migrated to Umbrella SIG.What config changes to be done in Endpoint for the new Umbrella SIG proxy control to be effective.

Hi All, I have two WSA at 2 location with distinctive configuration. Need to know can we create csr from one wsa and use it for both ?

Hi, As we know, Microsoft IWA (Integrated Windows Authentication) enables authentication/authorization using Windows AD to provide SSO experience to users. This is not popular scheme but some customers use it in Microsoft based environments. First of...

We recently implemented a pair of FW1120's with full FTD licensing.  Configuring access control policies to block specific websites and URL categories.One of the categories we have blocked is "games" which does a great job of blocking those websites....

Hi, Some vulnerabilities have been reported for our hardware wsa model, please let me know how can i remediate it. Below im sharing the same.   SSH Server CBC Mode Ciphers Enable   OpenSSH < 9.6 Multiple Vulnerabilities   SSH Terrapin Prefix Truncati...

Hello,We'd like to update the web certificate in UCSM plattform.We have 4.2(3i) version.Thank you very much and kind regards.

One of my customer has Taken DNA-P-EPLUS-BR-3Y . But as per the below document i could see that essential tier is having the features , but also i could see the below condition in the same document that ( Supported only with SD-Routing, URL Filtering...