Web Security

Hi,I have a cluster of ASA firewalls connected to 2 different switches but only 1 WSA that I want to deploy.The switches are 2960G, IOS 15.0(1)ASA1 (active) and WSA -- SW1 -- trunk -- SW2 -- ASA2 (standby)I was looking at SPAN/RSPAN feature and I hav...

SOURCE: https://supportforums.cisco.com/docs/DOC-1268#Allow_specific_urlsHi all,I have the following configuration in my ASA  based on guidelines from the above source to allow only certain sites in my home and block all requests to http and https si...

Since Cisco's great commitment to IPv6 seems not to infiltrate the WSA product team, I'm looking for some brainstorms as to how to roll out IPv6 without allowing IPv6 web browsing? I suppose a DNS filter could be made in the ASA to block any response...

Has anybody tried running the curl command on a WSA? - we're running Async OS 7.1 on our S-660's and unable to run curl on it.Thanks.Greg                  

Hi,Correct me if I'm wrong. As I understand transparent proxy != DPI because transparent proxy have some functional limitations and dpi haven't. So the WSA's web filters and rules are based on transparent proxy that will affect some type of traffic o...

While it is possible to configure P1 and P2 for different netowrks, can an additional default route be configured based on the client IP address? This would be similar to policy-based routing. So far, it seems that a combination of ip spoofing and PB...

I try to read the Ironport WSA user guide, but found the explanation very unclearabout the WSA Decryption Options below? (especially what the first three options is supposed to do?)ThanksPatDecryption for AuthenticationDecryption for End-User Notific...

Hello,I would like to quote an ASA5515 with AVC & WE options (max 250 users)I think isimply  need this :1      ASA5515-IPS-K9           ASA 5515-X with IPS, SW, 6GE Data, 1GE Mgmt, AC, 3DES/AES1      L-ASA5515-AW3Y=       ASA 5515-X CX AVC and Web Se...

http://blogs.cisco.com/security/virtually-there-cisco-announces-availability-of-virtual-web-security-appliance/Based on the above blog and this comment.Cisco is offering its market-leading S-Series web security appliances in a virtual form factor: th...

Hi all,I have two S370 running in transparent mode and all the clients accessing port 80/TCP have to pass the proxy. Unfortunately we have a user who accesses remote libraries. Therefore he has to authenticate explicitly with a remote squid proxy whi...

I need to know the throughput for s370 appliance in MB ? it's realy important

Hi Everynone.Is there any information about maximum filesize that is scanned with antivirus engine in S170 and S370 ?At the moment I compare WSA with other vendors. Some competitors claim that Ironport does not scan all downloaded objects. It only sc...

Hi,How to unblock a website when blocked due to proxy. May be due to bad web reputation value or other reasons.Regards,SK

folksi have a couple of WSA670s behind a big ip load balancer and this week, after a feature key update, i'm getting occasional problems with authentication when accessing https sitesi'm running in transparent mode but with the big ip configured as a...