Web Security

Helloi am testing ScanSafe features and was setup a ISR (C2900 Software (C2900-UNIVERSALK9-M), Version 15.2(2)T) to use ldap authentication to AD following http://www.cisco.com/en/US/docs/security/web_security/ISR_SS/ISR_ScanSafe_SolutionGuide.pdf.Un...

Hi,I'm installing 2 ironPort Web Appliance Security S170.I have edited my proxy.pac file and send it to both appliance. But now the PAC file is impossible to edit !When you go:  Security Service --> Pac File Hosting --> EditThe Appliance tells "APPLI...

Hi All,Good Day!We have an issue with our Ironport WSA S670 appliance. We have around 35K users and have access to sites like facebook.com, youtube.com etc.The issues is that at times certain sites are not accessible via proxy. For example we cannot ...

I have an access policy on an Ironport S370 configured for a locked down AD account that is allowing access to only two internal sites and blocking all other categorized and non-categorized URLs. I've created custom URL categories for these two URLs ...

Hi,      We need to configure an exception to allow the network 10.0.53.0/24 not require validation in Ironport WSA. however users of this network must pass through all content filters appropriate according to their AD group.NOTE: I need that Ironpor...

Hi I am trying to setup the following service: ( managed service) cisco ios router-887A (wccp v2)------internet -------Data Center ----ironportis it possible to use ironport in the cloud and use for many clients ? I was trying diffrent config  and sc...

I was looking through the firewall section for the SMA to see which ports need to be opened between the devices. Is there a guide or a list of ports that need to be opened between the devices.Here is a list of ports that I see (i used asyncos IPs for...

  We have an issue where we're trying to download drivers and support files from APC. We get as far as downloading the file (HTTP site forwards to FTP), but once it's downloaded it's 0k even though the download says it has downloaded over 2 MB. We're...

Hai Dears,I have doubt on Cisco Ironport WSA Caching, which i need to clarrify.I have one customer purchased Cisco WSA For their Cache purpose only. The site is a college and they want to cache the files they are downloading.So , my question is, sinc...

I have installed vWSA s370 into a client network. All config is workign well, Im using the vWSA in transparatent mode and have wccp configured on the network infrastrucuture. Im having some issues around vWSA thresholds potentially. I have noticed th...

We want to use CDA for transparent user authentication. Now, all users have domain credentials and even MAC users need to login with AD credentials to MAC machines.Will CDA be able to see MAC user login to MAC PC (all MAC PSs are part of windows doma...

Hi,I have two identically configured (policies) IronPort WSA S670 appliances running 7.5.0-833 and both added in SMA M670 management appliance running 7.9.1-102. Appliance A has McAfee license expired. Newly installed appliance B has Mcafee running f...

I have a Cisco S370 and generated a certificate Key to block HTTPS pages.I require a CA signs the certificate generated by the Cisco S370, but the CA returns me an error and asks the key is changed to 2048, but I have no option to do this in the GUI,...

Hi,I have an IronPort configured for transparent proxy, but secure authentication is not working. Is there any best practice for MAC computers other than "No Authentication"?Regards,