I am implementing HTTPS decryption and ready to move past the pass-through everything phase (taking baby steps to implement) and start decrypting and blocking. For blocking a category (like Adult), I was going to drop it in the decryption policy even...
Forum Posts
Hi community, I'm looking for multiple Configuration Master on SMA. Or contexts or something else. Thank you.
Hello Cisco,I have noticed that Ironport is classifying our forums as ""Pornography;Newsgroups/Forums".Correct classification would be: "Newsgroups/Forums".Please advise how to corrrect this.Best regards,Petri Simolin
Hello Team, We have an issue with AD that they blaming the WSA that causing the user lockout. Is there any document to prove that the WSA is not causing any user lockout. scenario: user is trying access thru web then suddenly she/he cannot access...
AllI have a couple of WSAs that require a certificate from a CA. One WSA is the primary for web traffic and the other WSA would come into play if the primary WSA is out of action. I would like to know if I can share the certificate from the CA for bo...
I am implementing WCCP to redirect traffic to an Ironport WSA, the port 80 traffic is proxied through without any issues. With regards to all 443 traffic a warning message is now shown to the user to which they can choose to continue to the site or ...
Hi I have :Model: S680Version: 8.0.8-113and I have problem with him.Everything works fine (filter, authentiaciont AD) but the proxy sometime lost the connection.I can log on the proxy and i have ping with him but the web site and outlook and other ap...
Resolved! WSA and AMP
Trying to understand how the WSA AMP works with Endpoint AMP/ASA Firepower.... Do they not integrate somehow where you see the trajectory of a file within a single pane? In all the demo's they can see when a file enters the network all the way to the...
Hi guys,I am having WSA POC for our customer here. They request "WSA pop-up notification" feature like that: when their users access to malware/spyware/gambling.... websites, the pop-up appear on their laptop to notify that they are accessing those i...
Hi team,I am working on the policy to control the Viber - which installed on the client laptop. the Viber is using port 4244 for communication.I want to add the Access Policy on the WSA to block the destination port (4244) but still not find how to c...
Were running the S300V and HTTP / HTTPS decryption and using wccp. Is there any trick to get Windows Store to operate (from Windows 10)? Were seeing a bunch of machines that upgraded to build 1803 lose access to the sticky notes app. The only way...
Hello , on a dedicated VM with AsyncOS that acted as a WSA Proxy after a couple of restarts from vSphere client this happened...No BIOS modification made...Could anyone help please?..Thanks FreeBSD/x86 boot default: 0:ad/0p3/boot/loader gptboot:No...
Hi.I'm trying to setup Remote Access VPN on Cisco FTD 6.2.2. Client (192.168.55.202) can ping IP address on FTD (gig 0/1.509 - 192.168.59.3) but cannot reach the HTTPS web page while using https://192.168.59.3 address on its browser.I captured traffi...
Hi! We are SNMP monitoring cacheTotalRespTimeNow and from time to time this value peaks extremely high, but no users has complain We have added the accesslogs Date: %L Dst-IP: %k UsrAgnt: %u ADGroup: %g AuthMethod: %m TransID: %I PrfPara: %:<a ...
Hi: I'm trying to block the upload of any document to Google Drive. I have applied the configuration in the Applications section within Access Policies, and I have also configured a decryption policy where I define the decrypt rule for the Online Sto...
