Hello. Sorry for my english.I am running IronPort S370 and I have blocked Predefined URL Category named " Online Storage and Backup". But one site from this category needs to be allowed (beta.hstor.org). How can I do this?
Hi There,I tried to block facebook and youtube Via CX ( Security manager), it is working fine for Chrome and Mozila but when i am trying to access from internet explorer it is not working. I am able to access both facebook and youtube. I followed the...
Hi all,I have this scenario, hope you can help.Users in AD, may be members of several groups. I need to create an access policy to users that belong to two groups. For example, if a user belongs to \Internet AND \Privilege then one policy needs to be...
Dear All,Recently , i got some error from Both ironport Web And Email Appliances as follows. For Email______________The Critical message is:An application fault occurred: ('snmp/ipmi_handlers.py _handle_fan_result|370', "<type 'exceptions.ValueError'...
So we've started handing out iPad's to our users. I've been able to setup them up to access our wireless network in a secure manner. My next problem is with getting them to use our web proxies. We have a pair of S170's that we are using. When I co...
Hi,Reading the document here - https://supportforums.cisco.com/document/147696/ios-scansafe-step-step-configuration It states the following -Prerequisite:ISR should be running a minimum code version 15.2(1)T1 or above.Available in IOS (universal) ima...
Hello,I have a use-case I would like to share with you. When a customer configures its WSA with highly restrictive internet access like in the example below, it may trigger some issues :1- allow internet access only for URLs defined in whitelist.2- b...
A customer wants revert from 7.7.0-725 to be 7.5.2-303. The revert option only shows 7.7.0-710 and 7.7.0-725 to be available. Does anyone know the best way to revert to 7.5.2-303 from 7.7.0-725? Is it possible that 7.5.2-303 will appear in the list, ...
HelloAs for WSA IronPort web security,does it work probably if the licenses expire"permit or block traffic as per stored DB" or it will permit everything and work in the default mode.Please advise.Thanks
Hello people and experts, I need your consultation regarding IronPort and CDA deployment.I couldn't find any information in internet...So my question is - if IronPort is AD domain member and Explicit forward proxy is planned to be used. Do I need CDA...
I need to block all internet access except two: one for normal and one for a trusted HTTPS site.can tell me how to configure the rule?I'm just managing to free up access to normal site, but I can not allow access to HTTPS site, blocking all other acc...
Hi All,We have a Cisco IronPort S170 (7.5.2-303 for Web) which controls Internet Access. The access policy in place is configured to block Executable Code. However, it has come to our attention that it is currently possible to download the GoToMyPC S...
Hallo,I'm having problems to setup the AD Authentication via NTLM. "Join Domain" gives "Status: Computer account ironport$ has been created."But when I run "Start Test" the Status changes to "Status: Computer account ironport$ not yet created." and I...
Hello.We have WSA s170 and using it like proxy with NAT.M1 - vlan 10 - for managementP1 - vlan 20 - recieve Client's requests (Private IP addresses)P2 - vlan 30 - (DMZ) connected to Internet with Public IP. User's vlans 101-105 AccessSwitches] <--->...
Hello,Some of our web devs want to start using websockets. We are using Ironport S670's running 7.5.2. I enabled HTTP Connect ports under Protocol Controls under the default policy so that it works. My question is do the Ironport's have insight in...
