cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2406
Views
0
Helpful
2
Replies

Ironport S160 7.5 & HTTPS

Berz123
Level 1
Level 1

Hi,

I recently set up a new Ironport identity group and access policy to assign to the new group.

I can't seem to get HTTPS web sites working with this goup, it seems to just get dropped by the proxy.

HTTPS is working fine for the exisiting access policys on the ironport box.

The message in the access logs show -

Time (GMT +11:00)
10 Dec 2012 09:19:11
tunnel://www.youtube.com:443
tunnel://www.youtube.com:443/
CONTENT TYPE: -URL CATEGORY: URL Filtering Bypassed
DESTINATION IP: No IP for this transactionHOST: mccwsa (10.1.20.40)
DETAILS: No_Auth_Restricted "Access". WBRS: No Score.
Block - Policy
0B
10.1.66.251
10.1.66.251

Has anyone got any ideas how to get this working?

2 Replies 2

Chetankumar Phulpagare
Cisco Employee
Cisco Employee

Hi Adam,

Can you confirm if you have also configured decryption policy to allow youtube? Did you also check this in policy trace?

Regards,

Chetan

Hi Chetan,

Thanks for your response.

I have had assistance from Cisco TAC, I missed a simple step in defining the HTTP Connect ports.