Web Security

HI,we would like to configure policies based on users and groups in our NDS without having ironport to prompt for username and password (single sign-on).We're using version 5.6.2, reading the user guide it seems that for this scenario the only possib...

So the Conficker virus rapidly spreads in Corporate environments that don't have the latest MS and AV patches. One of the tasks that the payload performs is to phone home to a preset list of sites to download more malware.Question: How does the Iro...

This may well be answered somewhere already and I just haven't found it yet, but it seems that IronPort is blocking Google's cached copies of sites as "Malware/spyware". I hadn't accessed any cached sites until this was pointed out to me today so I d...

Can the WSA block specific Non-HTTP protocols yet such as LIVE Messenger, AIM, GoogleTalk, Skype, etc?Thanks in advance.

I have a S650 version 5.5.2-030 for Web; and my network is a mixed novell e-direcotory / Microsoft AD. For now the global policy is set so that no authentication is required because we don't want that the users not in AD have to put their credentials...

is it possible not to authenticate 2 computers with same account?for examplePC1 = employee, with AD account. logged and can browsedPC2 = visitor, no AD account. but can login using user1 accounti already tested itThanks,Rommel

Currently any of our users running Windows Vista cannot pull up any of the Windows Gadgets that display weather, rss or stock feeds. What can I do to unblock? Steps taken already:1. Used WinShark to gather the IP addresses that are being blocked, I h...

Hello,i will allow MS Powerpoint *.ppt files but will block *.pps files. With the Mime-Type application/powerpoint or application/vnd.ms-powerpoint all Powerpoint-Files will be blocked.How can i do this ? Is there any way to define a file-extension t...

Hello, does anyone know of a test site of some kind where I can see results of the protections being exercised. Brand new system install. Kicking the tires in a lab now. I suppose I could go slumming but was thinking something less hit and miss. Any ...

AsyncOS 5.6.2 has been temporarily removed from our download servers. Support for NTLM Mode authentication was inadvertently removed from this release. Customers who need access to the fixes in 5.6.2 can request provisioning to 5.6.2 by contacting Ir...

5.6.2 is the first maintenance release on the Maui (5.6.x) code base. We included more than 25 bug fixes, of which I mentioned just a few below. (You can see the complete list in the release notes.) We encourage all customers to put 5.6.2 on a lab bo...

Sorry about the title - couldn't think of a clever way of saying this!!We have recently replaced our outdated proxy and filtering solution with a pair of IronPort appliances and are generally pleased with them.However, one thing that has come up on a...

I have enabled HTTPS proxy in some boxes and generate a local certificate but after this some sites are not accessing, some are because of invalid certificate and some are saying "Bad request". Can i have a valid certificate so this problem can be re...

On the m650 the centralized configuration manager has this nice thing under the configuration manager option to add a task. It will push out a configuration file that is saved in the /configuration/iccm folder on the m650 to a defined group (s650(s)...

I'd like to enable TCPDUMP on S box to capture traffic from client ip address. In the diagnostic menu, the default filter is (tcp and port 80). any idea about how to customize filter to capture traffic fromspecific ip address instead of all traffic t...