Web Security

Hey community, I'm looking for an opportunity to use X-Forewarded:For only for some defined domains. Is there a way to use dynamic source ip in custom headers ? For some internal web applications it is necessary to know the sourceip from the end us...

Over the past 90 days, I have 50.0M attempts and blocks heading to fastcast.go.com (resolves to fastcast.gns.go.com 199.181.132.89).  Has anyone dealt with this particular url in their reports?  If they have, what steps should I take next?  I can't s...

Hello, In the CDA i did set the clock timezone to EST, ensured it was syncing from our DC and even a show clock indicated the correct time.  The IP to user name mappings still show an incorrect time stamp so I rebooted the CDA.  Upon coming back int...

Hi I am getting email alerts from one of our centrally managed  web gateway appliances version 7.7.0-710 saying " An application fault occurred: ('updater/app_thread.py _set_abandoned_versions|882', "<type 'exceptions.TypeError'>", "'NoneType' objec...

Hi I'd like to ask why is it that on our Ironport WSA. The WSA's IP address is listed as the top client's IP's with malware connections detected on the L4 traffic monitor? Thanks, udimpas

Hello Team, Need your help. After we integrate the AD to WSA. It identifies the user/AD group correctly, but applies the wrong policy instead receives 'DefaultGroup'. WSA S370 AsyncOS 8.0.8-113 Troubleshooting Done: "kick" the proxy from CLI -> diag...

What would be the latest AsyncOS for S370?

I have been invited to teach some workshops in Houston. However, the people promoting them informed me that potential students are unable to examine my class materials because their corporate security device blocks my website. Here's the message they...

I have been seeing an increased number of critical alerts on my Ironport indicating that it has reached the maximum number of failures querying the DNS server. Has anyone seen this alerts before and/or know what causes them? I have not been able to f...

Is there an easy method to configure the Ironport to only inspect 80/443 and bypass any other ports with a explicit proxy deployment? I know this can be done in the browser on an IP basis but we would like to set this up on the Ironport WSA instead?

Hello Team, It is possible to convert the config from firewall (fortinet) to Ironport?

Does anyone know what version on TLS is supported by AsyncOS 7.5.x and 8.0.x? ThanksDominick

We have a cda virtual machine that our asa firewalls and WSA use to identify AD users to IP addresses.  This is pretty important so imagine our surprise today when it stopped authenticating people because its disk was full (130GB).  We powered it off...