Web Security

We have been having issues lately with our WSA. A user requests access to a website that is currently blocked, we add it to the whitelist but it is still being blocked by a catagory. The previous issue was blocked by catagory "food and drink" and now...

Hi everyone, One of my customer wants to establish IPsec vpn using forticlient through our infrastructure. And we have WSA proxying all internet traffic. We are unable to make it work... We are using explicit IP and Port configuration? Any suggesti...

I currently utilize Ironport WSA inline to scan my internet traffic. This traffic comes off of my Cisco ASA from IPsec tunnels that are terminated at my remote locations on Fortigate 60D firewalls.My remote users are having trouble reaching the inter...

Why am I getting the nessage below when accessing Google.com serach... several other users are getting it as well. To continue, please type the characters below: About this pageOur systems have detected unusual traffic from your computer network. T...

Folks,I am creating Web Access policies that will be applied to security groups that exist in a child domain under the root of our forest.When i try to browse the directory it only displays groups in the root of the forest.Does anyone know how to get...

Hello cisco community, can anyone help in my problem?. I can't see report in user's tab it show's loading...

hi all,i purchase a new certificate from public certificate authority , but when i try to upload the certificate with the key i get this error:Error—Certificate upload failed. The certificate file appears to be a server certificate. A signing certifi...

When a user receives a block page and is presented with the option to log in as a different user, we wish to change the time value that the WSA stores those credentials.  Right now it's 5 minutes and we'd like it to be 30.  It looked like ~4 differen...

It identifies the user correctly, but applies the wrong policy.  More info: Say we have 3 access policies: Global, Teachers, and Administrators.  The WSA identifies a user who belongs to the teachers group and should receive the 'Teachers' access pol...

Hi, We are running a S170 with version 8.5.2-027 for Web.It used to run in explicit proxy mode and everything is fine.To ease network and clients computers management, we've enable transparent mode. Network->Transparent redirection is set to 'Layer 4...

Last week I turned on the HTTPS proxy after running HTTP only since early this year. So far I would sum it up as a complete pain in the butt. At the moment by default everyone is setup as pass through except myself who is setup as monitor for everyth...

Hi, I can join the WSA to AD, but it can´t get AD-Groups. The realm was created but group search found no records.  Do I need another procedure to join a W2012R2 domain?  AsyncOS Version: 8.5.1-021 Windows 2012 R2 Checking DNS resolution of WSA hostn...

Hi, Our S170 running 8.5.2-027 for Web is very slow to respond using web management interface.When connecting over SSH, it either not works at all, or on a better case, I'm disconnected after a few seconds. (I got the prompt, can type a few character...

I have tested installing AnyConnect with Web Security using the installation script found in the AnyConnect deployment guide and successfully gotten it to work.When I installed the client, I enabled the flags to hide the uninstall under Add/Remove Pr...