Current situation: SMA v13.8.1-101, WSA 12.5.4-011, CM is 12.5 We want to upgrade to SMA 14.2.0-241 and WSA 14.5.1-016. The old compatibility matrix is no longer available. The new version at https://www.cisco.com/c/dam/en/us/td/docs/security/securit...
Hello, We have a customer who has access policy configured to block "online meetings" category and decryption policy action configured as "monitor" for "online meetings" category. I noticed that zoom is blocked for the customer as expected but webex ...
Hi, How many max interfaces on FTDv on Azure? I can't find a recent publication. I always see 4 interfaces (diag, mgt, inside, outside)Thank you.
Hello All, I know that in Cisco WSA, we can configure high availability with CARP protocol. But I need to confirm that in Active Standby HA of Cisco WSA is it stateful failover. Which means that If I confiugred HA in WSA and active appliance goes dow...
I have defined a custom & external URL category which will ingest sync with SOAR platform & synch with the external dynamic list hosted by SOAR platform.As of now I have followed all the pre requisite steps & set time to 01:00 (HH:MM) to update feed ...
Hello All, I'm bit confused with the traffic flow of Cisco SMA & WSA. In Cisco SMA, We have 1 Management interface and 4-5 data interfaces. My first requirement is that I need to configure a management interface for accessing SMA appliances only and ...
Hi,Today I registered our web security appliances with SecureX. Several hours have passed, but the dashboard shows no data. The devices are shown up as registered and cloud connectivity is reported green. Am I missing something? Nothing mentioned her...
Does anyone have the issue where the MS store downloads do not work via umbrella.This is whether it is behind a network or via roaming client using AnyConnect.If I stop the AnyConnect service on the PC the download works just fine.I have permitted ma...
Hello, we are using the Web Security S395 with ASyncOS 14.5. Currently, there is CVE-2023-36664. (CVE-2023-36664 (debian.org))Does our Web Security utilize Ghostscript? Unfortunately, I couldn't find any reference to Ghostscript in the documentation ...
Hi community,I have configured Cisco WSA with P1 and M1 interfaces. WebUI is limited to M1 only and has its own SSL cert from our internal PKI. Proxy Port on P1 is 3128 and HTTPS proxy is also configured with a working CA SSL cert. So far so good. Wh...
Hello guys, I have one confusion on which I need your thoughts, Kindly advise me on this. The scenario is that I have created one identification profile for user 10.0.250.70 for which I'm allowing a few predefined and custom categories. On the other ...
Hello,I have a Cisco WSA Virtual, I would like to know if there is a way to check :1- The disk space currently used for webcache? (ipcheck = total cache 200G) ?2- The list of domains/URLs currently cached (webcache > DESCRIBE > DOMAINS/URLS : need do...
Hello, I would like to ask about WSA. At web tracking, I see some lines with "http://URL" and some with "tunnel://URL". What is the difference?? Thanks and regards, Konstantinos
Hello Community, I'm stuck in a scenario where I need help from Cisco expert guys. I'm in an implementation project where I need to deploy Cisco WSA S695. We've already recommended 2 WSA in HA mode in DC for redundancy purposes. The client wants inte...
I am trying to change the TTL on username-to-IP mappings learnt from ISE-PIC on Web Security Appliance (software version 14.5.1-016) from the default 6 hours to 1 hour. This can be seen by issusing the command "isedata > cache > show", selecting an I...
