Web Security

Resolved! MS store downloads not working via umbrella

Does anyone have the issue where the MS store downloads do not work via umbrella.This is whether it is behind a network or via roaming client using AnyConnect.If I stop the AnyConnect service on the PC the download works just fine.I have permitted ma...

WSA - Ghostscript

Hello, we are using the Web Security S395 with ASyncOS 14.5. Currently, there is CVE-2023-36664. (CVE-2023-36664 (debian.org))Does our Web Security utilize Ghostscript? Unfortunately, I couldn't find any reference to Ghostscript in the documentation ...

Resolved! Cisco WSA with Demo SSL cert on P1 (not Proxy TCP Port)

Hi community,I have configured Cisco WSA with P1 and M1 interfaces. WebUI is limited to M1 only and has its own SSL cert from our internal PKI. Proxy Port on P1 is 3128 and HTTPS proxy is also configured with a working CA SSL cert. So far so good. Wh...

Resolved! Cisco WSA Web Access Policy

Hello guys, I have one confusion on which I need your thoughts, Kindly advise me on this. The scenario is that I have created one identification profile for user 10.0.250.70 for which I'm allowing a few predefined and custom categories. On the other ...

WSA check webcache

Hello,I have a Cisco WSA Virtual, I would like to know if there is a way to check :1- The disk space currently used for webcache? (ipcheck = total cache 200G) ?2- The list of domains/URLs currently cached (webcache > DESCRIBE > DOMAINS/URLS : need do...

HTTP vs Tunnel

Hello, I would like to ask about WSA. At web tracking, I see some lines with "http://URL" and some with "tunnel://URL". What is the difference?? Thanks and regards, Konstantinos

Resolved! Cisco WSA Redundancy

Hello Community, I'm stuck in a scenario where I need help from Cisco expert guys. I'm in an implementation project where I need to deploy Cisco WSA S695. We've already recommended 2 WSA in HA mode in DC for redundancy purposes. The client wants inte...

Change TTL for IP-to-username mappings from ISE-PIC on WSA

I am trying to change the TTL on username-to-IP mappings learnt from ISE-PIC on Web Security Appliance (software version 14.5.1-016) from the default 6 hours to 1 hour. This can be seen by issusing the command "isedata > cache > show", selecting an I...

Resolved! WSA blocks viber files and image

Hi,WSA allow to accept text and block file attachment or image.Is anyone know how to allow VIBER port 5242, 4244, 5243, 9785 for both TCP and UDP in order to send image and files tru viber? Please help. Thank you

Cisco Umbrella SIG

Questions related to Advanced App Controls of Cisco Umbrella SIG:1. I know Umbrella can block upload for Whatsapp.Does this mean Umbrella can block upload for both Whatsapp desktop app and Whatsapp web?2. Is it possible to only detect file upload act...

How do I configure User Agent on WSA - MS Edge Browser

I am trying to define the correct syntax for a User agent for MS Edge as found in Windows 10. Users attempting to use this browser are being prompted to authenticate before any internet access is granted. One of the browsers is presenting this str...

Resolved! Cisco WSA ID Profile Custom User Agent

Hello Community, I'm looking for a document in which all regular expressions have been given for mobile phones. I'm implementing a Cisco WSA in which I need to allow the iPhone, iPad, iPod, blackberry, android and Windows mobile in identification pro...

Cisco WSA Best Practice

Hello Community, I've gone through the Cisco WSA best practice document & I saw that 20 or less than 20 access policies configured in WSA are considered medium complexity & best practice. I just want to confirm that this number (20) varies from mode...

Problems with Web Security Appliance AsyncOS 14.5.1-016

Hi,I write this to prevent others from running into the same issue.Few weeks ago we upgraded our virtual Web Security Appliances from 12.5.5-008 to version 14.5.1-016 as suggested by the web UI. We use WSA via explicit mode and transparently via WCCP...

Resolved! Web Security Appliance Identification Profile

Hello guys, I'm new to the cisco community and I'm here to seek some help!! I'm engaged in a project in which I need to migrate the bluecoat webproxy to cisco wsa. In Bluecoat Web Access Policies, They've defined 10.x.x.25 in the source of the acce...

Web Security

Forum Posts

Resolved! MS store downloads not working via umbrella

WSA - Ghostscript

Resolved! Cisco WSA with Demo SSL cert on P1 (not Proxy TCP Port)

Resolved! Cisco WSA Web Access Policy

WSA check webcache

HTTP vs Tunnel

Resolved! Cisco WSA Redundancy

Change TTL for IP-to-username mappings from ISE-PIC on WSA

Resolved! WSA blocks viber files and image

Cisco Umbrella SIG

How do I configure User Agent on WSA - MS Edge Browser

Resolved! Cisco WSA ID Profile Custom User Agent

Cisco WSA Best Practice

Problems with Web Security Appliance AsyncOS 14.5.1-016

Resolved! Web Security Appliance Identification Profile

New Umbrella SSO Users Error

CSCvf84312 - "br" also affected?

Suggestion to Include More CTF Challenges in the Ethical Hacking Cours

Cisco Umbrella - upload file names

Cisco Talos Content Categorization

Exploiting DNS

How to install a godaddy .crt file on ASAv10

CISCO IRONPORT S100V VULNERABILITIES REMEDIATION

FMC Current Interface Status and Interface traffic Widgets

Are there not three different man in the middle attacks here?