Web Security

Empowering IPN Citizens through tools! IronPort’s 3rd Party Tools are listed below. Reply to this post to share your favorite 3rd party tools. For IronPort Unsupported Contributed Tools visit the Support Portal: http://tinyurl.com/3c5l8rIRONPORT MAKE...

We have merged the forums "Web Security Basic" and "Web Security Advanced" so that the discussions reach a broader audience and the more advanced users can help the newer users.Citizens Unite!

This is pretty interesting:"The site offers malicious code that webmasters with criminal intent can use to infect visitors to their sites with a spyware Trojan."http://www.computerworld.com.au/index.php/id;838771320;fp;16;fpid;0

Hi Gurus, Any idea on why i got errors accessing the logs directly from the WSA? say ftp://myironport.com/accesslogs ? Have anyone tried this one? Ive checked some microsoft kb's re this but i dont think those were the solutions. What are the ti...

Does anyone know if it is possible to restrict access based on domain membership or an AD Group? The purpose is to restrict non-domain computers even if the client has a legitimate domain credential to use for authentication.

Hi Gurus, Just asking if having reverse proxy feature of WSA will benefit web servers ..or are they planning to have this kind of feature?regards,kira

We have transparent authentication through AD set up, and it's working fine for IE and Firefox, but it still prompts in email with linked images.What would be the best way to fix this problem?

I'm in the middle of evaluating WSA and will replace our squid.On existing squid configuration:hierarchy_stoplist cgi-bin ?acl QUERY urlpath_regex cgi-bin \?cache deny QUERYWhich means not to cache any URL with cgi-bin keyword.Any way to put this on ...

Hi guys,We've set up a few S650s now, and our customers are more than happy. However, most of them are switching from another proxy, and as such would like some comparative figures regarding throughput, performance etc etc. Quite a few used Trend unt...

I'm looking to convert my WSA from explicit to transparent proxy using policy based routing on a Cisco router. See the config below where xxx.xxx.xxx.xxx is the P1 interface on the WSA. Does anyone see any issues with the following in a production ...

Hi, I wish Ironport will add to the WSA feature to allow MAC blocking .,,reason was if a client had no active directory..theyre purely on freeware like linux or so.. just suggesting :-)

I am currently evaluating WSA for an environment of over 60k users and curious to see if there is anyone else out there who has this capacity. If so have you encountered any scalability issues?

Hi, Does anyone have this kind of setup? Existing proxy is squid, MAC was used to filter users with internet connections. No domain controller on the client side and has a dhcp environment. Any tips?Capt. Winters

Thanks, I've been confused on this.

Hello Ironportians, I was wondering if any of you has info about the Custom User Agent that can be used to block Skype. Furthermore, I'd like to know if someone has tried blocking this application accross the WSA and if there's any piece of advice y...