Hello, Following the update of our web proxy from version 12.0.1 build 334 to version 14.5.0 build 537. Authentication does not happen correctly on requests going through the proxy and only HTTP 407 returns are visible in the logs on flows requesting...
Forum Posts
Resolved! Best Practice PAC Location on WSA
Dear Team, We have two WSA running in explicit proxy. We would like to store proxy pac file on WSA and we want client go with primary WSA as always and failover only if Primary WSA down. So is there any way to archive this goal? Note: Normally Proxy ...
Hi all,We are trying to block TLD’s (Top level domains) within the FTD’s / FMC. For example, we wish to block TLD’s that can pose threats such as RU, plus a few others. Currently, we have a rule built in the “Security Intelligence” to attempt a blo...
I need help for a Specific customer project. Currently we have MPLS with DC Singapore for the Intranet traffic & proxy >firewall for internet local Breakout.now for a specific team 10 users we need to build separate network peering using VRF & local ...
We are deploying Umbrella on our hybird user laptops. We are seeing internet speed reductions down to 1/10th of actual internet speed on these devices. We had a user today share screen captures of 2 separate devices (one using Umbrella, one not). ...
Hello, everyone. I am in my first month at new job and trying to fix some problems. One of them is that we have 2 WSAs those working in Forward mode. Browsers get WPAD.dat file from Citrix load balancer so that part of workers access internet through...
What will happen if the following Feature Keys expired?1. File Reputation2. Cisco Web Usage Controls3. Sophos4. File Analysis5. McAfee6. WebrootAnd how to check the feature being used or not?
From what I could remember and what I found during a recent search online, FMC manual URL filtering is mostly based on matching the hostname/domainname and/or sub domainname. So does this means I would not be able to use wildcard OR regex to define a...
Hi,In first place thanks a lot for your help.We have a Cisco WSA S390 appliance with version 14.0.3-014 as a enterprise proxy, the question is that we want limit the number of concurrent session from single ip, we want limit the number of concurrent ...
Resolved! FTD Application Block
Hello,I recently had some very high traffic by application risk come through, and I blocked this application A in my ACP. The first rule of this ACP is application blocks. Few days go by and dashboards show very high again, and when I open up context...
HI all, I am struggling with a small issue.We are running Azure Virtual Desktop POC, and we do not have a static IP assigned to the hosts. We also use Cisco Umbrella as our proxy for users, and I would like to update the network address of the Virtua...
Hi Team, I just want to ask, what method, and how Cisco determined some site/application belong to Risk : Very High, etc ? because in our customer deployment, there's a rules in ACP that Block Application that Belong in Categories Risk : Very High , ...
Dearsi would like to understand what does ftp over http OR SFTP over https means ?? can anybody give me an example of it, how the url would look like for accessing the ftp over http in a browser.the mail goal here isuser tries to download the file f...
Hello,FMC and FTD version 7.3.In looking at my dashboards recently, I noticed some traffic designated as very high risk. I created an application block for this traffic, which is high on my ACP. The traffic is not being blocked, and looking at the co...
Greetings!I am trying to create and issue an certificate for my Cisco C9300s. When we access our secure webserver for the switch it says it is not secure. We connect with https://ipaddress. I am using this How To to get it to work. Issue is when I im...
