Web Security

Currently in our proxy deployment it is possible to tunnel SSH through our proxy. It seems the WSA does not check on protocol level if the request is legitimate HTTP/HTTPS traffic.   Is there a way to configure the proxy so it will prevent SSH to be ...

Hi All,   I've hit a bit of a roadblock with an issue I ran into with our web filtering.    We have YouTube blocked at the domain level on our blacklist but have allowed a couple of URLS (regex) for YouTube in our Whitelist but the end user is still ...

Hello,   There is some way to create a custom filter and filter by date. I need to add a filter with the logs of the last month and between a few hours in particular. In Splunk, the filter it would be something like this:     | evaluate hour = tonumb...

Hello,   My question is how to log (#logging) the http or https connection on Cisco Switch 2960 ?   What is done :   #ip http server #ip http secure-server #logging host XXXX #logging trap debugging #logging origin-id hostname logging facility local6...

My proxy inserts XFF header by default. Some of HTTPS websites do not work if I do HTTPS interception. First I bypassed those websites from HTTPS interception and they started to work. Then I kept HTTPS interception enabled but disabled XFF intercept...

We recently deployed an S300v and retired our old tiered S170 which just does not seem to move around the web gui anymore.  I might try clonezilla on the two 250gb drives in the S170 to Samsung Pro 256GB drives as an experiment, but thats another sto...

Hi,   We had an unexpected restart in WSA. We check the system logs and we only see the RAID sync event, nothing about the cause for this restart. how can we get the root cause???   22 Jan 2018 13:52:04 (GMT +0100) Info: Begin Logfile 22 Jan 2018 13:...

WSA---->L3_SWITCH----->(inside)ASA(dmz)----     ++ASA is not redirecting packets to WSA however i see The HELLOS are exchanged. ++L3 switch has a route to reach ASA DMZ interface. ++In WSA i have configured both inside and DMZ ip under WSA>transparen...

i have a Cisco SF300-48, i configured in L3,   i configure a vlan 5 (192.168.5.1 255.255.255.0) and a vlan 10 (192.168.10.1 255.255.255.0)   Fasehternet 2 is a PC in vlan 10 whit access mode and Gigabiteethernet 1 is the routher of internet, in mode ...

Hi folks. Recently I haven't been able to reach m WebGUI. I get a Error response 500. While looking through various logs I found messages like the one stated in the title of this post. Does anyone have any experience with fixing that issue?

Hello guys,   I have created a url object and created an access rule policy to block youtube, the license is still valid but it just not working. Your assistance in this regard will be highly appreciated.   Thanks Tulee

 Hi Support Community,   I would like to ask you how I can manage non-active directory users authentication with WSA.   I have an existing architecture that uses AD integration for authentication.   I would like to provide an authentication for guest...

Most of these are towers we don't have in our proxy list anymore. Some are still there in the list. Why would this fail for a valid tower? ERR | Thread 00917C68 | Failed to verify Authentication key with the tower 184.150.236.58:443. Status Code : 0,...

Hi,   I have an ASA with below configuration:   dns domain-lookup outsidedns server-group DefaultDNS name-server 8.8.8.8 name-server 4.2.2.2   object network MGMT_SERVER host X.X.X.Xobject network obj-eclipse.org fqdn eclipse.orgobject network obj-ma...