Web Security

So i have a default identity policy that takes the identity of a user from an AD agent, i have also set up NTLM transparent authentication in case AD agent can not identify the user.it works well on our windows domain attached PCs but there is a prob...

Hi,How to release only one video youtube.com domain?The domain youtube.com is blocked in global policy.My version is 7.5.0 Web IronPort Best Regards, Paulo AraujoInfrastructure AnalystMail:paulo.sibalde@gmail.comSkype: psibalde

Hi,I'm pushing several logs from Ironport into splunk, including System Health Daemon logs.This makes it easy to monitor the current status of the proxies.Most of the entries in the log are quite easy to understand, but I'm uncertain of one field "Ba...

The Aquaforest website (aquaforest.com) suffered an attack back in January which resulted in /en/index.asp being infected with an iFrame JavaScript Trojan.This was corrected a few days after infection but IronPort/SenderBase still show a poor reputat...

Hi,Does anyone have experience with blocking Ultrasurf that users use to bypass the WSA proxy??I was wondering if it is part of cursom categories.If not, would it be possible to bypass this with decrypting https and use a regex?An example or advise w...

Dears,We have the following scenario :we have wireless internet which is integrated with radius server (NPS)computer joined to the domaine are authenticated directly using NTLM standalone computers are prompt for a user name and password,my question ...

I have a scenario where an ASA has two internal interfaces, corporate and guest and one outside Internet interface, with no layer 3 routing on the inside between the corporate and guest networks (VLANs).  Transparent redirection with WCCP is to be us...

Hello all,I need some advice / help getting WCCP working with our Cisco Ironport, ASA and 3945 router. At the moment, I’m trying to isolate the WCCP redirect traffic to my own PC so I don’t break our existing proxy traffic.This is our setup:LAN: 192....

The Release Notes for AsyncOS for WSA 6.3.3 through 7.5.7 state in Known Issue #51433 "The Web Security appliance sends the authenticated user name (X-Authenticated-User value) to external DLP servers in a format that is not compliant with the ICAP R...

Hi there,i keep recieve emel form WSA alert header as above.What thats means?its a details the problem.An application fault occurred: ('_coro.pyx coro._coro.coro.__yield (coro/_coro.c:5258)|348', "<class 'coro._coro.ClosedError'>", "<coro #3398421 na...