Hi All, Have a user who is trying to access a https website that is blocked. The policy trace is showing blocked by Category. However they are not being shown the standard blocked by URL category page. Instead they get The website declined to show ...
Forum Posts
Resolved! WSA clustering / configuration sync
HelloIs it possible to build a cluster with two WebSecurity Appliances? Or at least synchronize the configuration?Regards Marcel
Hello, I have a problem with 2 virtual WSA on ESXI 6.5(high availability not work 2 members backup) Even if the two WSAs on Esxi 5.5 works properly. Notice that i have enabled the promiscious mode (Net.ReversePathFwdCheckPromisc = 1). Please advice,
Hi Everyone, I am running a test on a WSA and I am unable to make HTTPS proxy to work at the moment, I can see in wireshark from a packet capture on the wire that the WSA is actively closing the TCP session and I receive an error message that is no...
Hi All,I'm trying to configure an Authentication Realm on an Ironport S370 running AsyncOS Version: 6.3.3-015. I keep getting the following errors when I test: Checking DNS resolution of WSA hostname(s)... Failure: Unable to resolve '**...
Does anyone have any information on eun_internal_group Identification Profile? Can't find any info on it. Trying to troubleshoot an issue with Identifty profiles in WSA where the identity Profile is being matched on that. If it wasnt matching an...
We are having a huge setup of proxies which are load balanced. We are using IP surrogacy concept and Authentication type NTLM and fail-over to basic . Users get randomly pop ups to enter proxy credentials
We are planning an upgrade on a couple of WSAs running version 10.5.2-072 and the idea is to get to version 11.5.1-115. The release notes mentions that we can go directly to the newer version but I would like to know if there is a guide with the requ...
We currently have WCCP configured on a Cisco 4500X switch. We have an ACL (REDIRECT_CLIENTS) where hosts and ranges are configured to filter which hosts get proxied to the McAfee Web Gateway (MWG). We have not seen any hits on the ACL for traffic bei...
Hi guys, We are experiencing slow browsing speeds after implementing a WSA. Any tips on what I can check to troubleshoot the root cause of this? We have a S190 appliance deployed as a transparent proxy running AsyncOS 9.1.3-016 for Web. Thanks in adv...
Hi, we have upgraded our WSA S380 from 9.x to 10.5.1-296. After that, we recognized a very high load on the Internet Connection (100%). We took a trace and there are many TCP retransmissions. We have another S380 with 9.x and there is everything fi...
Hi I have the next question. We have implemented Two WSAs in HA and WCCP transparent mode and configured the rules with IP addresses, now we want to filter rules using AD users, and groups. I've read that in order to authenticate users transparentl...
Update 2019-09-06:Due to the latest vulnerabilities, this seems to be the best right now:EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:DHE+AESGCM:DH+AESGCM:ECDHE+ECDSA:EECDH:DHE:DH:aRSA+AESGCM:HIGH:MEDIUM:!NULL:!aNULL:!3DES:!SEED:!DSS:!RSA+CAMELLIA Hello!In t...
I have a WSA running in a child domain, domain1.domain.com. These users are migrating to the parent domain, domain.com. Can I configure the two different domains to support the migration process on a Cisco Ironport WSA?
Hello, Is there a way to find out how much traffic the appliance has decrypted? The information is needed for forecasting and sizing purposes. The dashboard shows the total current connections, but unless I'm mistaken, this would constitute all kin...
