Web Security

Cisco WSA Stale Connections

Hi, I hope someone can help, currently we have a number of Cisco WSA's behind a load balancer, some are S370's and some S300V's, the issue I am currently facing is that the WSA's are holding on to connections, the timeout on the WSA's and loadbalanc...

Resolved! WSA bundle license subscription

hi All, Im confusing about the bundle license in WSA380. i list down here the licenses which are bundled in WSA380. WSA-S380-K9WSA S380 Web Security Appliance with Software WSA-CASM-LICWSA Cisco AnyConnect Secure Mobility LicenseWSA-PROXY-LICWSA Prox...

Resolved! WSA IP spoofing with WCCP redirect using an ASA

I am trying to resolve an issue I am seeing with a new installation of a WSA (8.5) and an ASA (9.5.1) running FireSIGHT (5.4.1.4). The WSA, ASA, and FireSIGHT are all operating correctly, but in reviewing the Malware File Trajectory, the only intern...

Resolved! WSA HTTPS Identity Certificate Upload Error

Hi Team, I want to perform HTTPS Decryption and also I would like to generate CA signed Identity certificate for my WSA. I am using Windows Server 2008 as my CA Server so firstly I have generated a CSR Request from WSA and uploaded that CSR into CA ...

Resolved! Can access server by DNS on the DMZ

Hello, I am trying to access an internal website from the Corporate Network to the DMZ. The website sits on the DMZ. I can access it via IP address ie https://192.168.1.1 but not by DNS name I also have rules to access it externally from the Int...

AD agent not able to fetch events from one DC

Hi Everyone, We just deployed AD agent in our test environment to get the user information from IP .We integrated two DC clients where one DC01 is physical and DC02 is virtual. Now the problem is that eventhough both DC are integrated with the same...

URL category caching

Hi, I have a pair of S380 web security applicance running 8.5.2-027 in active / passive mode. The active one for a specific url eg www.something.com ; in the policy trace and in user requests shows that the category for this site is Games. The pass...

WSA Response Times

It seems to me these response times are high and I wanted to get your opinions. We have 8 WSAs in transparent mode. CPU Usage %Response Time (ms)Proxy Buffer Memory (Bytes)Transactions Per SecondConnections OutBandwidth Out (Bytes Per Second)12.80%1...

WSA-S170 filesystem full

I already opened a ticket with TAC on this, but curious while I wait for them to get back to me, has anyone ever encountered this? When you try to access the WSA configuration webpage you get: Error Response Error code 500: Server got itself in trou...

Web Security Appliance Questions

Can wsa block users when multiple (configurable) numbers of policy violations are triggered simultaneously? Does it support session time out and idle time out facility to forcefully logout the users? What about monitoring and blocking Instant Messagi...

WSA access policy issue

I have a user that has an access policy applied to them to be allowed access to the URL category Job Search. When I do a policy trace, it comes back with transaction permitted, but is still getting the Block page stating that they are not allowed: Bl...

How to get user 'logged in' to ironport web filter without launching IE

We have an issue with some employees who use third party programs that traverse the Internet. These programs are 100% allowed by the organization as they are required for day to day business. Some programs go over the Internet to communicate for ce...

How do we know if ScanSafe is running?

Hello, We have scansafe running on our network and its installed as part of our build process. We recently had a security problem with one of our devices and it turned out ScanSafe was installed but wasnt running on this particular device. Is there...