cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
452
Views
0
Helpful
1
Replies

Searching for web sites in logs, Ironport WSA

tahequivoice
Level 2
Level 2

I have a customer who can't reach a specific site. I know the IP of the site, and can see the Ironport make the Proxy connection on the ASA to that IP, but they are getting a spinning wheel and eventually page times out. If they connect to their guest network which bypasses the Ironport, they can get the page just fine. So only thing in the middle, the Ironport.

When I review the logs for the domain, they come up empty. What can I look at to see the connection details and find out if it is the Ironport?

1 Reply 1

kushsriva
Level 1
Level 1

Hi,

 

You can login to the WSA through SSH and run the command "tail" then select number 1 for access logs which should provide you the information about traffic passing through the WSA.

 

Regards,

Kush

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: