Hello All, We've 2 WSA in DC and a Citrix load balancer. Our requirement is to utilize both ISPs from Cisco WSA. So, what will be the traffic flow if we use Citrix Load Balancer for load balancing? We're using a browser-based explicit proxy for all u...
Forum Posts
Resolved! DMZ Network Design
Dears I am setting up a DMZ network and we have purchased a WSA, I would like to understand from design perspective is it OK to connect P1 port of WSA on the internal core switch but logically traffic will pass through internal firewall, and P2 port ...
Hello All, I'm trying to load the configuration file in Cisco WSAv, But somehow it fails and shows an error: Configuration file was not loaded. Parse Error on element "wga_config" line number 3769 column 15: Error in certification validation: Failed ...
Resolved! WSAv Upgrade Failed
Hello All, I'm trying to upgrade the WSAv AsyncOS version and it fails every time. The DNS is configured properly and I did the nslookup as well for updates-ironport.com & downloads-ironport.com and WSAv successfully resolve the ips as well. I just d...
Hi,Does anyone know what HighDFThresholdActions means from the wsa?I'm getting alot of these logs from proxylogs.proxylogs: Warning: PROX_CONNTRACK: - : [61833:1] hit HighDFThresholdActions and couldn't close
Hello, can anyone infor me about how much it takes for a ticket to be resolved on CISCO Talos? Because I can't access 2 websites that I need to access them everyday for my company because my IP is banned from Talos. I did make a ticket after I checke...
Hi All,We have deployed cisco umbrella destination lists and policies for URL filtering. For testing purpose, we have one policy set to unlimited access, while the other one is restricted to "Allow Only" mode. We have Google Web Designer desktop app ...
Hello, We have Cisco WSA deployed as transparent proxy. There users who accesses Bloomberg which uses non-http UDP and TCP ports. The customer wants to send this traffic through WSA. Does the WSA handle this type of traffic?. Thanks Shabeeb
For a few years we've been doing SAML authentication to Azure AD for Cisco Umbrella. Logins have worked fine through https://login.umbrella.com/sso or the Azure AD URL of https://myapps.microsoft.com/signin/[appId]?tenantId=[ourtenant]. Logged in suc...
I am facing issue with MS Teams over MAC system. After installing Cisco Any Connect Umbrella Client & configured web Policy, MS Teams stopped working. It is asking for sign in and not getting through. Done the combinations with policy but no luck.MAC...
Resolved! SWA and SMA and CM compatibility
Current situation: SMA v13.8.1-101, WSA 12.5.4-011, CM is 12.5 We want to upgrade to SMA 14.2.0-241 and WSA 14.5.1-016. The old compatibility matrix is no longer available. The new version at https://www.cisco.com/c/dam/en/us/td/docs/security/securit...
Hello, We have a customer who has access policy configured to block "online meetings" category and decryption policy action configured as "monitor" for "online meetings" category. I noticed that zoom is blocked for the customer as expected but webex ...
Hi, How many max interfaces on FTDv on Azure? I can't find a recent publication. I always see 4 interfaces (diag, mgt, inside, outside)Thank you.
Resolved! Cisco WSA HA
Hello All, I know that in Cisco WSA, we can configure high availability with CARP protocol. But I need to confirm that in Active Standby HA of Cisco WSA is it stateful failover. Which means that If I confiugred HA in WSA and active appliance goes dow...
I have defined a custom & external URL category which will ingest sync with SOAR platform & synch with the external dynamic list hosted by SOAR platform.As of now I have followed all the pre requisite steps & set time to 01:00 (HH:MM) to update feed ...
