Web Security

Hello community,recently we are experiencing random blocking of some webs on Cisco WSA with reasonReason: BLOCK-MALWARENotification: MALWARE_SPECIFICWeb is only blocked about 1 of 10 access attempts and after refresh it is loaded correctly.Seems like...

Hi, we recently configured Umbrella for EntraID SSO access. However, we noticed that when creating a new user by sending the access invite, it remains pending. When accepting the email, the user receives an error. Accessing with single sign-on (SSO) ...

Hi allwe are running version 15.2.3-007 and had issues with "https[:]//static.licdn.com/sc/h/aw8kb2iuzc84hkxmjwwi3fqi4".Allowing "deflate" didn't help to allow download of "text/javascript", enabling "br" as well helped finallyIs the function broken ...

Dear Community,I hope you are doing well.I would appreciate your support in resolving the following query:What are the recommended commands for Cisco WSA Proxy related to Integrity Monitoring, and what is the significance or purpose of each command?Y...

Hi Cisco Community, I'm planning to upgrade our **Cisco Web Security Appliance (WSA)** from **AsyncOS 14.5.0-537** to **15.2.3-007**. Should anyone tell me the best practices and what to check before the upgrade? Looking for advice on:1. Any **critic...

Hi All, Facing an error where crowdstrike agent not able to connect to crowdstrike portal due to ssl certificate failed error. I have added the required url in allow list and decryption bypass policy, still the same issue. Pls note: Currently im usin...

Hi Everyone, I am performing an offline upgrade for Cisco WSA. I am trying to download firmware package from http://updates.ironport.com/fetch_manifest.html. and the download link is not working. I just wanna check if there's an alternate site to dow...

HelloNew to Umbrella and having trouble allowing desktop app such as WhatsApp and LINEWe have blocked the Social Networking category for all colleagues but I would like to allow access to WhatsApp and LINE. Looking at WhatsApp I've added whatspp.com ...

Hi what is the recommended asyncOS for  "Secure Web Virtual Appliance S300V" i work with 15.x , and it is OK for me, but i need to know what is the recommended by cisco. yaron

I'm trying to disable SOCKS5 on my APIC due the libcurl heavy buffer overflow vulnerabilitie. I'm not sure if the proxy even exists on the APIC. I only found the http and https. Any ideas?

Dear community, I would like to know if on a Web Security Appliance On Prem it is possible to block executable file included in pdf or docx files? I can block exe downlaod, but looks that when the exe is included users can download them! Thank you

Hi All, I have generated certificate from wsa appliance .pem format and same using on client machine under trusted root certificate. Can i use that certificate for https decryption or need to have CA signed or AD signed certificate. Pls note- User id...

has anyone done WSA onprem to umbrella SIG migration. How to get the Identification Profiles, Access Policies from WSA migrated to Umbrella SIG.What config changes to be done in Endpoint for the new Umbrella SIG proxy control to be effective.