cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3296
Views
0
Helpful
1
Replies

user agents

hello,

I am having a problem where sometimes ironport block everything,

we have opened a case and the support told us to bypass authentication for the following user agent

Microsoft NCSI
Microsoft-CryptoAPI
Windows-Update-Agent
jupdate    <--  http://javadl-esd.sun.com/update/1.6.0/1.6.0_26-b03.xml
MSDW    <-- http://watson.microsoft.com/StageOne/Generic/PnPDevic...
Gp
Microsoft BITS
Google Update/1.3.21.79;winhttp;cup    <-- http://tools.google.com/service/update2?w=<some_long_random_string>
ent-shasta-rrs.symantec.com:443
liveupdate.symantecliveupdate.com

this solution helped us for a month, then we are having the same problem,

do someone have the same behavior?

1 Reply 1

donnylee
Cisco Employee
Cisco Employee

Depending on what traffic is blocked, you can check the details of the access log after adding the user agent custom field to the log subcriptions (%u). Once the blocked traffic is found and verified why it is blocked, you can add the new user agent entry to the identity where the collection of users agents are exempted from authentication.

Hope this helps.

Regards,

Donny