Hi David ,
I would start by grepping for the access logs to determine which access policy your hitting. You will also need to look at your online help in the GUI of the WSA -> Support and Help -> Online Help -> Search Tab type access logs should be page 72. This will show you how to read the different fields in the grep out put. Focus on the requests being made to google IPs. See if any of them are being Denied ex TCP_DENIED/403 this would mean your being blocked by an access policy. If your seeing 200 in the HTTP status code field please open a support request as further trouble shooting will be required.
To grep the access logs for an entry, SSH into the WSA and run the following command from the CLI:
1. Grep
2. Enter the number of the log you wish to grep.
[]> 1
3. Enter the regular expression to grep.
[]> IP of the PC that the issue is being re produced on.
4. Do you want this search to be case insensitive? [Y]>
5. Do you want to search for non-matching lines? [N]>
6. Do you want to tail the logs? [N]> Yes
7. Do you want to paginate the output? [N]>
Thanks,
Erik K.
Sincerely,
Erik Kaiser
WSA CSE
WSA Cisco Forums Moderator