Web Security

We have upgraded our M660 to 7.2.1-036 code, we have not upgraded any of our WSA's to 7.x code yet, but noticed under the 7.2 configuration master that identities that had any identity that had a authentication realm/scheme are showing red and it's r...

Hi,I need to know what is the exact TCP source port range the IronPort S670 use for the client connections. RegardsGangi

I have multiple WSAs utilizing the CDA for transparent auth.  I have the CDA agent logging to a syslog and I see a bunch of these messages. Aug 13 08:20:50 <CDASERVERNAME> CSCOibf_Failed_Attempts 0002999937 1 0 2015-08-13 08:20:50.158 -05:00 00057305...

Hi,Got a pretty basic question, we have had to clear some logs down on our WSA S170, mainly the access logs (which we have backed up), I've noticed it's currently set to roll over every 10GB and is limited to 10 files, I was wondering when we run web...

Someone has a zabbix template for Cisco IronPort web security AsyncOS 7.5? Many items to monitor and wanted to choose the most important and specific. It is difficult to define because it does not know well the solution.

We have a S170 WSA that is running 8.5.2-027.  I see there is an available upgrade to 8.8.0-085.  Anyone try this release yet?  Any new features?

Hi Guys, One of my WSA went down for approximately 5 mins, i couldn't even ping on Proxy server IP address but was able to ping Management IP Address but very slow, many drops in that too. Within 5 mins everything automatically came up and worked fin...

Reviewing a setup, and noticed in the later version of code, 8.0 for example, there are two methods for access.  Since FF and Safari have issues authenticating access when browsing, and IE does not, would the transparent user ID work the same way for...

Hi all: Every time we Publish in CSM 380 (9.5.0-125) to 2 WSA 380 (8.8.0-085) we get an error in one of them. The message is this: Generic Protocol format error: local variable 'data' referenced before assignment In Status of Publish for this WSA is ...

Hello All, Is there anyway that CISCO WSA supports SHA256 certificates? Thank you.

Hi all, I would like to kindly ask you whether is possible to add header X-Forwarded-For on domain basis? It means add it to the requests for domains abc.com, def.com but not ghi.com. I know i can enable it globally for all http requests, but I do no...

Hi , with cisco ironport (wsa) how to block skype ?

I have a problem for block skype, I have tested as shown in this link. http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118094-congifure-wsa-00.htmlI have configured the WSA as a tranparent proxy, and all function well,  but ...

Hi AllI have a S370 web security appliance.  I have user that are trying to connect to the windows store to download apps.  I have read about a couple of ways to get around this, but what is the correct way to allow this as I do not want to just bypa...