Web Security

Hi,I'm pushing several logs from Ironport into splunk, including System Health Daemon logs.This makes it easy to monitor the current status of the proxies.Most of the entries in the log are quite easy to understand, but I'm uncertain of one field "Ba...

The Aquaforest website (aquaforest.com) suffered an attack back in January which resulted in /en/index.asp being infected with an iFrame JavaScript Trojan.This was corrected a few days after infection but IronPort/SenderBase still show a poor reputat...

Hi,Does anyone have experience with blocking Ultrasurf that users use to bypass the WSA proxy??I was wondering if it is part of cursom categories.If not, would it be possible to bypass this with decrypting https and use a regex?An example or advise w...

Dears,We have the following scenario :we have wireless internet which is integrated with radius server (NPS)computer joined to the domaine are authenticated directly using NTLM standalone computers are prompt for a user name and password,my question ...

I have a scenario where an ASA has two internal interfaces, corporate and guest and one outside Internet interface, with no layer 3 routing on the inside between the corporate and guest networks (VLANs).  Transparent redirection with WCCP is to be us...

Hello all,I need some advice / help getting WCCP working with our Cisco Ironport, ASA and 3945 router. At the moment, I’m trying to isolate the WCCP redirect traffic to my own PC so I don’t break our existing proxy traffic.This is our setup:LAN: 192....

The Release Notes for AsyncOS for WSA 6.3.3 through 7.5.7 state in Known Issue #51433 "The Web Security appliance sends the authenticated user name (X-Authenticated-User value) to external DLP servers in a format that is not compliant with the ICAP R...

Hi there,i keep recieve emel form WSA alert header as above.What thats means?its a details the problem.An application fault occurred: ('_coro.pyx coro._coro.coro.__yield (coro/_coro.c:5258)|348', "<class 'coro._coro.ClosedError'>", "<coro #3398421 na...

We are having problems with HTTPS file downloads failing when going through our IronPort S370 Proxy.  Files will partially download in a resulting corrupt file, but the application will not perceive there to be a failure.This happens at various point...

You can control the bandwidth per user after reaching a certain limit of Quota?example:User may view one hour of videos on the Internet or downloading 100MB of videos.If you reach your quota this connection is only limited to 200Kbps and not totally ...

I have 2 Ironport S370, one of them has this alarm: E1211 Raid Controller Battery...any idea about it?

My website has been given a poor rating by Senderbase.We had a few issues with it in early January that were rectified, however it is now March and the rating has not been changed.A number of organisations that use the Cisco are now unable to access ...