From what I could remember and what I found during a recent search online, FMC manual URL filtering is mostly based on matching the hostname/domainname and/or sub domainname. So does this means I would not be able to use wildcard OR regex to define a...
Forum Posts
Hi,In first place thanks a lot for your help.We have a Cisco WSA S390 appliance with version 14.0.3-014 as a enterprise proxy, the question is that we want limit the number of concurrent session from single ip, we want limit the number of concurrent ...
Resolved! FTD Application Block
Hello,I recently had some very high traffic by application risk come through, and I blocked this application A in my ACP. The first rule of this ACP is application blocks. Few days go by and dashboards show very high again, and when I open up context...
HI all, I am struggling with a small issue.We are running Azure Virtual Desktop POC, and we do not have a static IP assigned to the hosts. We also use Cisco Umbrella as our proxy for users, and I would like to update the network address of the Virtua...
Hi Team, I just want to ask, what method, and how Cisco determined some site/application belong to Risk : Very High, etc ? because in our customer deployment, there's a rules in ACP that Block Application that Belong in Categories Risk : Very High , ...
Dearsi would like to understand what does ftp over http OR SFTP over https means ?? can anybody give me an example of it, how the url would look like for accessing the ftp over http in a browser.the mail goal here isuser tries to download the file f...
Hello,FMC and FTD version 7.3.In looking at my dashboards recently, I noticed some traffic designated as very high risk. I created an application block for this traffic, which is high on my ACP. The traffic is not being blocked, and looking at the co...
Greetings!I am trying to create and issue an certificate for my Cisco C9300s. When we access our secure webserver for the switch it says it is not secure. We connect with https://ipaddress. I am using this How To to get it to work. Issue is when I im...
We are looking at getting our WSA logs into Splunk to create Dashboards and ease of access for our IT Manager to be able to look at Bandwidth utilization easier. I was wondering can we have the logs go to syslog as well as leverage Centralized Report...
Hi Team, I have been testing WSA with Async version 12.5.5 We have integrated AD authentication, configure SSL inspection on WSA Would like to know how we can configure below settings in WSA 1. Geo location based restriction for users connecting to ...
Hi Team, There was a problem that WSA somehow block access to accounts.google.com, althought everything is open for this on terminal servers and I don`t see errors in the WSA logs, what could be the metter? Iwill be grateful for advice. Problem acco...
API is enabled on CISCO ISE . Need to know how to add HSTS max-age=31536000 in CISCO ISE on port 9060 used by API to close security port scan vulnerability?
To comply with an internal policy a customer need to document steps to reset their S690 hardware appliances to a factory default in case if a password lost or not available. A physical access is available. Is there any option to enable support tunnel...
Hello Team,I have a Cisco S100V Secure Web Appliance, and today it just stopped working for like 2 minutes. When I said stop, there was no proxied traffic and it happens instantly and then came back. I checked but everything was fine. My ISP said ev...
Hello, I have a problem with applications like Whatsapp or Signal which are installed on PC. All http/https request are transfered to our Cisco WSA via WCCP. Only solution which I found is to add source IP address to Bypass but this is very problemat...
