Web Security

Showing results for 
Search instead for 
Did you mean: 

Forum Posts

Custom throttled URL Category

Hi all!I have recently been tasked with creating a custom URL category on an Ironport S370. The previous engineer that handled the appliance has left and here I am. Can someone tell me how I can create these and if its possible to set bandwidth limit...

WSA T1 (L4TM) with firewall cluster

Hi,I have a cluster of ASA firewalls connected to 2 different switches but only 1 WSA that I want to deploy.The switches are 2960G, IOS 15.0(1)ASA1 (active) and WSA -- SW1 -- trunk -- SW2 -- ASA2 (standby)I was looking at SPAN/RSPAN feature and I hav...

MPF ASA for Web Filtering. Https traffic

SOURCE: https://supportforums.cisco.com/docs/DOC-1268#Allow_specific_urlsHi all,I have the following configuration in my ASA  based on guidelines from the above source to allow only certain sites in my home and block all requests to http and https si...

johnramz by Beginner
  • 1 replies
  • 0 Helpful votes

IPv6 Workaround

Since Cisco's great commitment to IPv6 seems not to infiltrate the WSA product team, I'm looking for some brainstorms as to how to roll out IPv6 without allowing IPv6 web browsing? I suppose a DNS filter could be made in the ASA to block any response...

m.glosson by Beginner
  • 11 replies
  • 0 Helpful votes

Resolved! cda query

folksi 'm hoping you can help me out with a cda queryi've set up 2 cda appliances and am in the process of pointing them at 2 ad servers but i think i've hit a problemthe setup guide for the cda requires a registry change to the ad server but we have...

WSA dpi, proxy

Hi,Correct me if I'm wrong. As I understand transparent proxy != DPI because transparent proxy have some functional limitations and dpi haven't. So the WSA's web filters and rules are based on transparent proxy that will affect some type of traffic o...

Multiple Default Route on S370

While it is possible to configure P1 and P2 for different netowrks, can an additional default route be configured based on the client IP address? This would be similar to policy-based routing. So far, it seems that a combination of ip spoofing and PB...

WSA decryption options

I try to read the Ironport WSA user guide, but found the explanation very unclearabout the WSA Decryption Options below? (especially what the first three options is supposed to do?)ThanksPatDecryption for AuthenticationDecryption for End-User Notific...

plao by Cisco Employee
  • 2 replies
  • 0 Helpful votes

ASA - How to quote AVC & WSE ?

Hello,I would like to quote an ASA5515 with AVC & WE options (max 250 users)I think isimply  need this :1      ASA5515-IPS-K9           ASA 5515-X with IPS, SW, 6GE Data, 1GE Mgmt, AC, 3DES/AES1      L-ASA5515-AW3Y=       ASA 5515-X CX AVC and Web Se...

WSAv available via software license only?

http://blogs.cisco.com/security/virtually-there-cisco-announces-availability-of-virtual-web-security-appliance/Based on the above blog and this comment.Cisco is offering its market-leading S-Series web security appliances in a virtual form factor: th...

George D by Beginner
  • 1 replies
  • 0 Helpful votes

Ironport WSA AV scanning

Hi Everynone.Is there any information about maximum filesize that is scanned with antivirus engine in S170 and S370 ?At the moment I compare WSA with other vendors. Some competitors claim that Ironport does not scan all downloaded objects. It only sc...

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers
Top Solution Authors