Any methods to simulate Cisco IronPort WSA appliance for practice

Similar to GNS3 on which we can simulate ASA/Routers, same way any other methods to simulate Cisco IronPort WSA appliance for practice or testing? Please let me know. Thanks.

You can download the virtual WSA. I have not tried it so I'm not sure how it works without a license.
http://software.cisco.com/download/release.html?mdfid=284806698&flowid=41610&softwareid=282975114&release=7.7.5&relind=AVAILABLE&rellifecycle=GD&reltype=latest

Similar Messages

QoS Cisco SCE8000, Caching Cisco IronPort WSA, Loadbalancing Cisco ACE solution

Hi all,
Our customer is a mobile operator. They need a integrated solution for caching, QoS and Loadbalancing in a combination. From my understanding of their goals, they need to providing stable and speedy broadband access as well as good user experience by the differentiation service offering. They need to classify IP traffic and prioritize and control of content-based services for a given subscriber while transparently and dynamically redirect and load balance the application level classified of IP traffic to a proxy caching server regardless of protocols such as http, https, ssl, ftp, flv, mms and rstp, sip, p2p....
Attached pls find the RFP and technical specification for Caching and QoS.
I appreciate your expertise to consult me whether I can propose for them the Cisco ACE standalone appliance or ACE engine module for 7600/6500 for loadbalancing, Cisco IronPort WSA for caching and dual Cisco SCE8000 for QoS as an integrated solution. Is this solution feasible/workable and where could I find the same reference or solution design or technical guidance on this?
Thanks a lot and would like to hear from you at the soonest!
Best regards,

Is it Support Network News Transfer Protocol On Cisco Ironport WSA S670?

Hi,
I have an issue whith a costumer with Cisco Ironport WSA S670, my question is if the WSA support NNTP?
Thanks
Alex Juache

Hi Alejandro,
The WSA does not support NNTP.
Sincerely,
Erik Kaiser
WSA CSE
WSA Cisco Forums Moderator

Is there any Ironport Virtual Appliance for Testing Purpose ?

Hi Everyone,
Advance Thanks to Every One.
Is there any Ironport Virtual Appliance for Testing Purpose ?
Regards,
Bala Krishna G

Looks like there are a couple of vendors who have virtual options. Here's one.
http://www.ironportstore.com/VirtualEvalRequest.asp
Also, IronPort has a 30-day free trial of their product.
http://pages.ironport.com/evalrequest.html?source=eval_req
Hope this helps.
Brandon

Cisco Wireless NAC Appliance - Design Practices ??

Hi,
I have a new Cisco WIreless NAC appliance, the purpose of which is to manage the Guest users access to network. I have been searching for some best practices related to the design of this appliance but havent found one.
Can anybody help me in sharing his design experience or any docuement which would be guiding in deciding over the design / placement of this NAC device in network.
Thank You.

Hi,
there is nothing such as "Wireless Nac appliance".
The question is "do you have the NAC Guest Server" or the "Nac appliance Server and Nac appliance Manager (CAS/CAM)" ?
Because those are just not the same at all.
Then on the wireless side, do you have autonomous APs or a WLC ?
Sorry to ask, but there's just so many possibilities you could be asking that we need to clarify.
My bet is that you are either looking for this :
http://www.cisco.com/en/US/partner/products/ps6128/products_configuration_example09186a0080a138cc.shtml
or for this :
http://www.cisco.com/en/US/partner/docs/security/nac/guestserver/configuration_guide/20/g_hotspots.html#wp1092277
Nicolas
===
Don't forget to rate answers that you find useful

Cisco ironport WSA Communication Ports.

Hai any body please suggest the different ports the WSA using to communicate with devices like AD using NTLM, ACS, NTP etc.??
Regards,
Fayz

Hi,
The WSA uses the management interface to communicate with AD.
Thanks
Chris

In Cisco IronPort WSA, what is the difference of an Access Policy, and an Identity?

Hi Everyone,
I am currently setting up a custom access for a particular subnet.
What I did is to create a new identity for them, then allowed only specific URL categories for them. Note that the subnet is already allowed to access the internet through Global access policy.
What will be the difference if I rather created a new Access Policy for the subnet?
And technically, what's the difference of an Access Policy and an Identity?

This was not my question. I asked if using the Marginal in Printing will you have a frame around the image?
I think you're confused about which thread you are posting to. "Wully bully" started this thread by asking about identify plates and watermarks, and I replied to Wully bully's post.
Nevertheless, your question too about printing is best asked in the main LR forum, not here.

Any reference site using CISCO or Big -IP for load balancing

we are considering switch based load balancing solution for middle tier. Are there any pointers , reference sites ?
I am aware of sites using Metrics Server for forms server load balancing. We are not planning to use MS.
regards
shrikant

Hi Naveen,
You need to do following steps (Try first in Test env ;)
1. Login in to Oracle Applications Manager Portal
2. Navigate to AutoConfig section (Site Map->AutoConfig)
Configuration Wizards
Click on "Launch Wizards"
3. Fill in fields as instructed.
(Basically you need to put Vhostname + Apache Port number)
4. Run autoconfig
If you haven't got those wizards:
1. Install Latest OAM patches (It is good idea to be on the latest patches of technology stack of Apps).
2. Or if you cant, you can to try edit Context XML file for each server manually:
2.a
s_webentryhost <Vhost>
t_session_persistent true
t_dns false
s_webentrydomain <your domain>
s_webentryurlprotocol http
s_active_webport 8005
-- If you havent got mentioned parameters in the XML context file you need to apply latest template autoconfig patches
2.b
run autoconfig
Hope it helps,
Yury

Can any provide me problem issues on ABAP dictionary for practice?

Or any one can tell me the links in which problem issues on ABAP dictionary is there?
Moderator message : Don't ask for links & solution to vague requirements. Thread locked.
Edited by: Vinod Kumar on Jun 14, 2011 9:36 AM

Hi jessculter,
Thanks for your post.
I am sorry to hear about the problems you have been having lately.
Please send me in your details using the "Contact The Mods" link found in my profile and I will take it from there.
Cheers,
OlgaC
BTCare Community Mod
If we have asked you to email us with your details, please make sure you are logged in to the forum, otherwise you will not be able to see our ‘Contact Us’ link within our profiles.
We are sorry that we are unable to deal with service/account queries via the private message(PM) function so please don't PM your account info, we need to deal with this via our email account :-)
If someone answers your question correctly please let other members know by clicking on ’Mark as Accepted Solution’.

Ironport WSA - Management interface

Hello,
I have installed one Ironport WSA appliance for my customer.
I would configure the following interface :
-M1 : for the management
-P1 : for the production interface
-T1 : for L4 inspection
I have specified a default route for M1 and P1.
When I tryed to ping Internet or perform an update of the WSA, I watched the request exit by the M1 interface.
It doesn't work because the management network can't exit in Internet (it's the policy of the customer).
-It's normal that the upgrade of WSA and the ping exit by the M1 interface ?
-If I want perform authentication in NTLM (with an AD domain) the request with the server and the client is performed with P1 or M1 ?
-The upgrade of antivirus & sensor base use M1 or P1 ?
-I thinked that M1 was only used for the management of the WSA (SSH and HTTPS).
-How the WSA appliance can manage two default routes ?
Can you give me more information about M1 and P1 and the role of each one ?
Best Regards
Cédric

You can change the route that the update and upgrades use by going to System Adminstration>Upgrade and Update Settings. Then click on the "Edit Update Settings". You can pick the routing table/interface here. By default its set to the managment interface.
I'm fairly sure that the NTLM traffice from the WSA to the domain is via the managment interface.
P1 is for the proxy traffic. Whatever way you get internet traffice to the box, it goes through P1, in and out (unless you use P2)
M1 is for all of the other stuff: web management, ssh, updates, ldap/ntauth, etc.

Cisco Ironport Certificate ISsue

Hai All,
We have cisco ironport WSA 370 version 7.5 .
We need to decrypt some https traffic . But the issue is our corporate AD support only 2048 bit cert. But our WSA box only support 1024.
Heared that asycos 7.7 (new release) support 2048 bit cert. When i check the 7.7 guide, its not mentioned. Can you please suggest???

Hi Mohamed,
There is a feature request so the WSA can generate 2048 bit certificate; but you can upload a an Intermediate root signing certificate to the appliance.
Look for "Uploading a Root Certificate and Key"
https://www.cisco.com/en/US/docs/security/wsa/wsa7.7/User_Guide/WSA_7.7.0_UserGuide.pdf
HTH,
Luis Silva
"If you need PDI (Planning, Design, Implement) assistance feel free to reach"
http://www.cisco.com/web/partners/tools/pdihd.html

Cisco ironport User to proxy connection ports

Hai, we are using cisco ironport WSA in explicit mode, Placed in ASA DMZ. We are using Version 7.7 which can inspect socks traffic also.
The customer needs to open ports for user to ironport WSA through Firewall for all traffic. Please let me know which all ports to be opened from user to proxy!!

Hai Chris,
So that Means, eventhough socks is using random port, we need to allow Socks listening port only through firewall for all socks traffic in explicit mode???? Do you have any document !!, if possible can you share this to me??
Also, all other http, https & ftp traffic, proxy will listen on web listening port, rit????

Cisco Ironport failover

Hi all
Can someone please assist me im trying to setup two Cisco Ironport WSA devices to failover for each other, what would i require for this to happen.
With Thanks
Kuda

Hi Vince
Yes, i had that issue using pac files and IE9.
i opened a case with Microsoft Tech support, and after 2 months, they said that there is an IE9 bug, and will be considered on new patch releases. (it was 6 months ago, and i think is not a patch available yet...)
The Microsoft solution was use IE8 (failover works as expected)...and don't upgrade to IE9...
i didn't test it on IE10, i think the issue is the same as IE9, but you should test it with all the patches up to date.

Cisco Ironport

Cisco Ironport S370 is able to fetch only 1000 users from the AD, while testing. There are more than 5000 users in the AD. Is there a limiitation ?

Hi sridharmohanraj21,
As far as i know the license for Cisco Ironport is only for the license itself and not per user but i will check you need any additional license for this. what type of license do you currently have for the Cisco Ironport?
Thanks,
Ferdinand Guasque
[email protected]

IronPort WSA management through Security Management Appliance

Hi,
I have two identically configured (policies) IronPort WSA S670 appliances running 7.5.0-833 and both added in SMA M670 management appliance running 7.9.1-102. Appliance A has McAfee license expired. Newly installed appliance B has Mcafee running for 28 more days. "Sophos" is enabled on both and working good. Config Master 7.5 was built based on the config from appliance A.
Now, when i want to push the Config Master to both the associated WSA, it fails on appliance B as "McAfee" is disabled in Config Master but enabled on it. The setting "Security Services Display" in M670 was changed to enable "McAfee" but now appliance A fails giving a mis-match error on publishing.
How to workaround this ? Can McAfee license/feature key on appliance B be expired / disabled now without waiting 28 days to let it expire.
Thanks,
Rick.

Hello Rick,
You can disable Mcafee globally on the SMA by going to :
GUI -> Web -> Utilities -> Security Services Display -> Edit Display Settings-> Under Configuration Master 7.5 ->
Do your Web Appliances have McAfee Anti-Malware enabled? -> Uncheck the box and submit.
Also, Disable Mcafee on the appliance that thas 28 days of the licenses left, This way Mcafee will be disabled on all your boxes.
I hope this helps.
Regards,
-Puja

Any methods to simulate Cisco IronPort WSA appliance for practice

Similar Messages

Maybe you are looking for