We have a PKI infrastructure in place, and I was wondering if I could use the cert and key from one of our issuing CA's which chains back to our root CA, instead of the root CA's cert to do HTTPS proxy? or more technically, will the WSA ta...
Hi,We have 2 S370 Web appliance configured in Failover in explicit mode using .pac file.Those S370 are in version 6.3.7-018. 2 Interfaces are configured on each S370 :M1 : for management onlyP1 : for proxy (data) client flows.All of these interfaces ...
Hi,we are installing 2 s160OS Versionsame machine, same license feature, but after last os upgrade we have 2 different version v7.1.1-033 and v7.1.1-027Why ?https, for the moment customer don't want enable https proxy, but user must access to https s...
Hi,how can I get a trusted root certificate with its private key to upload into WSA?We run a corporate CA and can sign user and server certificates without problem. When I create a certificate request (with OpenSSL as explained in the Ironport knowle...
Hello all,I have a couple of WSAs working with AD authentication. Machines that are part of the AD domain work fine with SSO. The thing is that machines that are NOT joined to the domain get the prompt for credentials. Is there a way to disable this ...
I have several users that are in the process of testing Windows 7 64 bit that are reporting problems with repeatedly getting the Ironport warning page that you should get when accessing a website that is in a category that is set in the Warn category...
Does anyone know of any issues that would prevent a laptop using Computrace to talk with its mothership, which I believe is absolute.com? We have proven it is related to the proxy. The only way I can get it to work is to exclude the internal source a...
Hello Experts,I have a problem. I'm trying to set the WCCP redirection on my ASA 5510 to an IronPort box.The problem I face is that the traffic from the client to the server is effectively put in the GRE tunnel, the return traffic is not. As a result...
I am looking for a way to automatically save my MSA and WSA configurations to an off-appliance location. From the GUI, saving the configuration is pretty easy but requires manual intervention. The best way I have found so far (with the CLI) is to e...
hallo,some of our Active Directory users are configured to only logon to a limited number of machines.Ironport Authentication (LDAP based, group authorization) fails for these users. (Invalid Credentials)when I add the Ironport (hostname, ip-address,...
I have a IronPort working in transparent mode. The WCCP is performed for switch Cisco 6509. In case of fail of IronPort the WCCP goes down and the traffic will be interrupped?.Or continue to pass traffic without being redirected?Regards,Jaime.
I'm just over 6 months on the job and am new to the IronPort. Found that users can still get to facebook and other web sites by using https. Not sure if I need to enable the HTTPS proxy. I don't really care to monitor the SSL session. Our policy ...
We have a site we regularly use, and recently it has been given a -6.0 web reputation score. Our policy is to block for -6.0 sites. Is there any way to exempt a particular URL, and allow it, regardless of web reputation score? Seems like there sho...
I have two s370's on their way. Does anyone know if there isbuilt in HA or some type of redundant setup? I only have onemain campus and everyone uses same internet pipe. I want to have an active/standby setup if possible.Any advice/comments are appre...
I have a couple of users who are complaining about getting the URL Filter Warning pages repeatedly. You know what I know at this point. What I suspect at this point is that they are getting pages for different categories but are not sharing those ...
