Web Security

Dear All,Since we are using IPS which takes care of Malware etc.. is it require to have WAF? If yes, why and any recommended products? Thanks 

Hello, I have a few questions about best practices for Access Policies.This will be deployed as explicit proxy.  I have my Global Identity tied to NTLM auth and another identity for Windows Updates, determined by destination URLs.I have set my Block/...

We have upgraded our M660 to 7.2.1-036 code, we have not upgraded any of our WSA's to 7.x code yet, but noticed under the 7.2 configuration master that identities that had any identity that had a authentication realm/scheme are showing red and it's r...

Hi,I need to know what is the exact TCP source port range the IronPort S670 use for the client connections. RegardsGangi

I have multiple WSAs utilizing the CDA for transparent auth.  I have the CDA agent logging to a syslog and I see a bunch of these messages. Aug 13 08:20:50 <CDASERVERNAME> CSCOibf_Failed_Attempts 0002999937 1 0 2015-08-13 08:20:50.158 -05:00 00057305...

Hi,Got a pretty basic question, we have had to clear some logs down on our WSA S170, mainly the access logs (which we have backed up), I've noticed it's currently set to roll over every 10GB and is limited to 10 files, I was wondering when we run web...

Someone has a zabbix template for Cisco IronPort web security AsyncOS 7.5? Many items to monitor and wanted to choose the most important and specific. It is difficult to define because it does not know well the solution.

We have a S170 WSA that is running 8.5.2-027.  I see there is an available upgrade to 8.8.0-085.  Anyone try this release yet?  Any new features?

Hi Guys, One of my WSA went down for approximately 5 mins, i couldn't even ping on Proxy server IP address but was able to ping Management IP Address but very slow, many drops in that too. Within 5 mins everything automatically came up and worked fin...

Reviewing a setup, and noticed in the later version of code, 8.0 for example, there are two methods for access.  Since FF and Safari have issues authenticating access when browsing, and IE does not, would the transparent user ID work the same way for...

Hi all: Every time we Publish in CSM 380 (9.5.0-125) to 2 WSA 380 (8.8.0-085) we get an error in one of them. The message is this: Generic Protocol format error: local variable 'data' referenced before assignment In Status of Publish for this WSA is ...

Hello All, Is there anyway that CISCO WSA supports SHA256 certificates? Thank you.

Hi all, I would like to kindly ask you whether is possible to add header X-Forwarded-For on domain basis? It means add it to the requests for domains abc.com, def.com but not ghi.com. I know i can enable it globally for all http requests, but I do no...