Web Security

I have two S670's that I am configuring for our network. We are running Version 7.1.3-021 for Web.One one WSA, under Access Policies, it shows it is monitoring 115 Applications. On the other WSA, only 18 Applications are monitored. The Acceptable Use...

Hi all,I'm sure there is a really easy answer to this but I cannot find it:Scenario: Custom HTTPS portal that instead of using port 443 uses port 444. How can I allow this through the Ironport S160 Web Appliance. I've currently deployed this using a ...

HiSome users require ftp access using Filezilla. We wish to narrow it down to a group of users in Active Directory. I can't get this to work.I have configured Filezilla to use the ftp proxy on port 8021 but I get a handshake error when trying to c...

Hi all,I'm looking for some guidance on a problem i'm facing with Ironport. Our external company website has a flash clock widget that loads 8 different timezones. Depending on the website page you visit it may only load 6 of the 8 clocks. The proble...

I'm hoping this will be a simple enough question.We have a pair of Ironport S370s managed by an M670 for web content filtering and reporting. We have "Use Basic or NTLMSSP" for the authentication scheme, and users who use IE as their browser are bein...

Hi,we have an existing squid proxy and would like to test an Ironport WSA.If we use the ironport as a proxy we notice that it can decrypt https on sites like facebook or twitter and it is filtering as configured (read only facebook for instance).But ...

I have an WSA S370 with Version: 7.1.3-021. The users use Single Sign on their PC and the configuration is in explicit mode, configured in the Internet Explorer. Also the identity use cache with the IP address.The problem that happens sometimes is th...

Good day.We currently use the IronPort S670.  In the the Log Subscription, section, we are trying to get a custom Log Subscription that uses the Access Logs.Bellow is I have inputed in the Custum Fields area of the Log Subscription: Date %v|Time %V|U...

Hello,can one generate reports by defined identities?User reports typically include AD user names or an ip address. Can one generate a report for networks or better yet a number of networks that in consequence form an identity, i.e. to generate repor...

Hi,It might be a simple question but I couldn't find it. Is it possible to adjust the In-Use Connection Timeout for a particular domain (via CLI) and not global as this is the only option I found? We experiencing timeout issues for a particular domai...

Hi All,I am looking for a proxy solution for our enterprise network, and considering Ironport WebSecurity S370 appliance.I am just curious if there is any good design guides on how to properly implement Ironport on the network.I need best practices d...