cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1837
Views
0
Helpful
3
Replies

IP in place of URL in WSA Web Tracking for HTTPS traffic

I just did migration from WSA version 7.0 to 9.1 and in web tracking page for http traffic I see URL but for HTTPS traffic I see only IP that make very hard to track the page. Why WSA show only IP for HTTPS traffic and if I can change it to URL?

Thanks

3 Replies 3

srue
Level 7
Level 7

Did you ever solve this problem?

Murad Al Halawa
Cisco Employee
Cisco Employee

Hello Alex,

 

I believe the problem you are reporting was fixed under this new enhancement  request in version 11.7 : https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvg62192/?reffering_site=dumpcr

 

So before version 11.7 the WSA was not reading from the SNI into reporting that's why for HTTPS pages without decryption you were only seeing IP addresses.

- if you need to upgrade to version 11.7 please don't hesitate to reach Cisco TAC in order to provision it for you as it's still limited deployment.

 

Regards

Murad Al Halawa

Considering that the issue you are experiencing is with Transparent mode:

 

This fix in 11.7 is limited to custom url category as of now (LD) release and not for predefined categories.

Regards,
Lokesh K. Lal
Engineering Product Manager
Cisco Systems Inc.

Please don't forget to rate useful posts