Telnet not working on Cisco WSA

[ezzaariyouness]

Hello everyone, 

I have a Cisco WSA S395 version 15.1.0 that I'm not able to lunch telnet from it  .

For example, I'm able to ping a website on the internet but not able to do telnet on port 443.

Internet, it's joinable from the WSA.

Can you please help solve this issue. 

Best regards

Younes

[balaji.bandi]

For example, I'm able to ping a website on the internet but not able to do telnet on port 443.

This was not clear - are you able to ping from WSA ?

ping work on different way, Telnet to port 443 work on different way ?

check any firewall in the path make sure WSA IP have access ?

may be try different interface if you like to try :

https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117986-qa-wsa-00.html

[ezzaariyouness]

Yes, I'm able to ping the website from the wsa .

the flux is opened on the firewall, the issue that I'm not able to lunch telnet.

[balaji.bandi]

 the issue is the was not able to lunch telnet.

Can you post the output what error you getting ?

[ezzaariyouness]

[balaji.bandi]

what is the next path ? any firewall ?

[amojarra]

Hello @ezzaariyouness 

As Balaji mentioned , it is best to check the upstream device, 

here are couple of test please :

[1] since you can ping, most probably the routes are correct, can you try to check access to port 80, meaning that telnet to example.com port 80.

[2] it is best to have a PCAP in WSA. to see which part you are getting declined,  most probably you are not getting the SYN-ACK back. if it is so, you need to check the upstream device (firewall or upstream proxy) to see if they are blocking the HTTP/HTTPS or redirecting the return path. 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++        If you find this answer helpful, please rate it as such      ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++