cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
570
Views
0
Helpful
1
Replies

WSA with bitdefender

Dears

we have WSA deployed in transperent mode, some of our laptops "outsource" have Bitdefender EDR and seems it has URL filtering and act as proxy as well, I tried to open many websites which are blocked by WSA on their machines and I keep seeing Bitdefender certificate instead of WSA certificate !!how I can control their web traffic ?

 

1 Reply 1

amojarra
Cisco Employee
Cisco Employee

Hello @Network Engineer 87 

 

it is best to check the Accesslogs ( CLI > grep > find the number associated with accesslogs [ most of the time it is 1 ] > filter for your client IP > hit enter > for the Tail part press Y > enter 

then try to generate some traffic, to see if the WSA's response, 

 

Also it is better to have a packet capture from WSA as well, to see if the traffic is coming and going correctly, 

 

then please share the results, to see if there is anything we can do to assist 

 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++        If you find this answer helpful, please rate it as such      ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++