Web Security

Running Ironport WSAs on ASyncOS 9.0.1 I have a desire to block top-level domains on the proxy known to be associated heavily with malware, spam, etc.  In this specific instance, I am looking for best practices for blocking all ".top" domains. Is t...

I'm looking for some feedback. We have recently deployed Firepower services on our ASA, but want to keep using the WSA for web filtering. The issue I'm having is that all web connections on the firepower services is sourced from the WSA as expected....

Certificates, the bane of an IT administrators existence.  There are many of them, they expire at different times and need to be renewed.  With as many as there are to manage usually you don't find out about an expired certificate until the moment it...

I got the following email from our S170 WSA appliance: The Warning message is:  Your "merlin" key will expire in under 5 day(s).  Please contact your authorized Cisco sales representative. Product: Cisco S170 Web Security Appliance Model: S170 Versio...

Hi Cisco, our website https://www.nomination.fr/client/auth/login is currently classified by iron port as: Menace Type : othermalware Domain reported and verified as serving malware. Identified as malicious domain or URL we are not cisco's client ...

Hello Team, we are running the following device/os version and we are facing slow download speed  like 37K, could you please suggest the possible points to check Model:     S170Version:     7.5.2-304

What is the necessary to add any domain in custom url categories "App destinations" Thanks, Manoj

We have WSA (AsyncOS 9.0.1) as our web proxy.  We received a new requirement to block specific IP addresses.  How do I do with the WSA?  I know about custom URL categories and setting access rules, but that didn't seem to work when I used IP address ...

We are currently looking to move to virtual appliances and in the process simplify our design a bit. In our current layout (explicit forward), we have P1 on the internal network and P2 in the DMZ. We don't like giving our virtual infrastructure acces...

Currently running 9.1.1-074 on a pair of them, and for the most part have been stable, and pretty much trouble free. There is a pending upgrade, 9.1.2-010, however, I see there are only 2 features added to it.  Are there any other compelling reasons ...

There are several HTTPS sites which, when we try to access them, give varying errors (Firefox "Secure Connection Failed", IE "Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced settings and try connecting..." even though these are turned on, and Chrom...

I am having trouble getting my WSA S6xx to authenticate using Kerberos going though a F5 load balancer. Looking at access-logs only NTLM is being used. I if move Identity to just Kerberos all I receive is '407' Any help with this is appreciated . ...

Over time our S170 web UI is painfully slow to simply log in and do ANYTHING.  I just wasted 10 minutes of time just getting logged in and going to policy trace to check why a site is blocked for a particular user. Any idea why this thing has such p...