folksfollowing authentication problems we've implemented two cda servers to use for transparent user authentication i've configured the existing ntlm domain to use the cda servers and allowed the radius traffic through my firewall i've create...
I have an Ironport S160 which has been off line and spare.Our other live S160 developed a fault and was replaced with an S170 which is now up and running.I am looking to update the spare S160 with the configuration file for the faulty S160.My problem...
Hi,I'm using AsyncOS7.5 on Ironport S360.I don't like to have a Blocking Notification for say ad.doubleclick.com when I'm visting www.youtube.com for example.In other words and more generally spoken, I don't like to have any Blocking Notifications fo...
Hi all!I have recently been tasked with creating a custom URL category on an Ironport S370. The previous engineer that handled the appliance has left and here I am. Can someone tell me how I can create these and if its possible to set bandwidth limit...
Hi,I have a cluster of ASA firewalls connected to 2 different switches but only 1 WSA that I want to deploy.The switches are 2960G, IOS 15.0(1)ASA1 (active) and WSA -- SW1 -- trunk -- SW2 -- ASA2 (standby)I was looking at SPAN/RSPAN feature and I hav...
SOURCE: https://supportforums.cisco.com/docs/DOC-1268#Allow_specific_urlsHi all,I have the following configuration in my ASA based on guidelines from the above source to allow only certain sites in my home and block all requests to http and https si...
Since Cisco's great commitment to IPv6 seems not to infiltrate the WSA product team, I'm looking for some brainstorms as to how to roll out IPv6 without allowing IPv6 web browsing? I suppose a DNS filter could be made in the ASA to block any response...
folksi 'm hoping you can help me out with a cda queryi've set up 2 cda appliances and am in the process of pointing them at 2 ad servers but i think i've hit a problemthe setup guide for the cda requires a registry change to the ad server but we have...
Hi,Correct me if I'm wrong. As I understand transparent proxy != DPI because transparent proxy have some functional limitations and dpi haven't. So the WSA's web filters and rules are based on transparent proxy that will affect some type of traffic o...
While it is possible to configure P1 and P2 for different netowrks, can an additional default route be configured based on the client IP address? This would be similar to policy-based routing. So far, it seems that a combination of ip spoofing and PB...
I try to read the Ironport WSA user guide, but found the explanation very unclearabout the WSA Decryption Options below? (especially what the first three options is supposed to do?)ThanksPatDecryption for AuthenticationDecryption for End-User Notific...
Hello,I would like to quote an ASA5515 with AVC & WE options (max 250 users)I think isimply need this :1 ASA5515-IPS-K9 ASA 5515-X with IPS, SW, 6GE Data, 1GE Mgmt, AC, 3DES/AES1 L-ASA5515-AW3Y= ASA 5515-X CX AVC and Web Se...
http://blogs.cisco.com/security/virtually-there-cisco-announces-availability-of-virtual-web-security-appliance/Based on the above blog and this comment.Cisco is offering its market-leading S-Series web security appliances in a virtual form factor: th...
