Web Security

Hi All,I've just installed a new WSA S650 with AsyncOS 5.6.0-623. We have enabled group authentication with LDAP using an Active Directory W2K3 and we are facing a strange issue, randomly users are not being matched to his/her AD Group then Default P...

I run a url whitelist and blacklist on my S650 and I have noticed some strange behavior.If I put "somesite.com" in my blacklist it will block the base url "somesite.com". It will not, however, block "www.somesite.com". If I put ".somesite.com" it wil...

Any plans to add full FTP proxy capabilities to the WSA? I understand it will do FTP via HTTP, but we are looking for a straight FTP proxy to replace our current solution.Thanks,Tim

Have the newer version of the WSA give us the option not to display an message when an ad or pop up is blocked?I have asked about this before and I thought that is was in the blueprints for a future release I just wanted to see if is has been done.I ...

Is it possible to allow a website url i.e. 'www.website.com/url' but block the main site 'www.website.com' and any other links on that site?

Hi all, I've had a request to block users from using a streaming internet radio site. They access the site via a vista widget they have installed on their desktop. I'll installed the application on my PC and found that when the application is running...

We have a S650, OS 5.6.2-102; a user need to access to a website that has a video streaming that uses protocol RTMP. If i use a pc that do not use proxy, i am able to see it, if i try to access to the same site using the proxy, i get the error "strea...

Pardon if this is a bumb question, but how exactly does Sawmill "integrate" with the WSA? When creating a profile, where the logs? I would suspect on the WSA.

Hi,I want to configure a REALM NTLM.When I try to join ironport to my Active Directory Domain I get the following error""ERROR - Computer Account creation failedFailure: Error while joining WSA on to server x.x.x.x: Failed to join domain: the network...

Hi,my WSA ignores additional suspected malware addresses when I connect via http to the website. Connections on Port 23 (telnet) to the host ARE detected.In detail:I recently activated L4TM. In the L4 Traffic Monitor overview I can see several ports ...

HI,we would like to configure policies based on users and groups in our NDS without having ironport to prompt for username and password (single sign-on).We're using version 5.6.2, reading the user guide it seems that for this scenario the only possib...

So the Conficker virus rapidly spreads in Corporate environments that don't have the latest MS and AV patches. One of the tasks that the payload performs is to phone home to a preset list of sites to download more malware.Question: How does the Ironp...

This may well be answered somewhere already and I just haven't found it yet, but it seems that IronPort is blocking Google's cached copies of sites as "Malware/spyware". I hadn't accessed any cached sites until this was pointed out to me today so I d...

Can the WSA block specific Non-HTTP protocols yet such as LIVE Messenger, AIM, GoogleTalk, Skype, etc?Thanks in advance.

I have a S650 version 5.5.2-030 for Web; and my network is a mixed novell e-direcotory / Microsoft AD. For now the global policy is set so that no authentication is required because we don't want that the users not in AD have to put their credentials...