Cisco CSC Web Filtering and Citrix\Ts users

Hello we need to buy a cisco CSC module for cisco ASA, and we're using Citrix Presentation server and Terminal Server Users, is CSC capable of ahtentitcate transparent the users in citrix (x users are using same IP)?, the CSC uses ntlm for this?, thanks for all.

Hello,
No, as I already answered on the other question
Yes, it will be a problem as the AD agent will need to log every single time a user logs into a PC, then it will create a map ( username to Ip) In this case that will be the problem as all of them will have the same one."

Similar Messages

  • Global Web Filtering Options

    I am looking for a global web filtering solution for our business but am having trouble finding a solution that will work acceptably for us globally.
    The problem is that our campany has hundreds of very small offices (mostly only 2-3 users with the odd larger office) located in remote locations all around the world where WAN links are very expensive and slow.
    We use all small office type cisco routers in our remote offices of various types (such as 800 series) and are rolling out WAAS/WAVE solutions to optimise our slow WAN links as much as possible, and all sites have site-to-site VPNs from the routers to our UK-based data centres.
    Currently we use Websense configured on the local routers at a few of our offices with a regional server in places such as the UK for most of Europe, and Mobile for most of the US for example.
    We could expand this to all locations, including Australasia, Middle East, Far East and Africa etc. but due to the remote locations we would need many local servers in many countries as the infrastructure to have just one regional Websense server isn't good enough in these areas and web performance would be too slow to be useable due to the latency to the Websense server location. It simply isn't financially feasible to put in hundreds of servers at lots of 2-3 man offices in the middle of no-where so I've been looking at other options.
    I was hoping a hosted solution would be the answer, but I've looked at WebSense's hosted service and it doen't appear to cover all regions (just has server farms in US/Europe which is no good for Africa etc.) I've also looked at Symantec MessageLabs but this has the same problem as there is no coverage in the Middle East/Asia/Africa etc and it proxies all web traffic so performance at these sites would probably be appaling with the limited bandwidth on top of the latency to the closest MessageLabs servers.
    I've now seen that Cisco have a new IOS Content Filter which uses Trend database servers. This sounded promising as it appears to cache the URL checks on the router making the server location less of an issue. But I'd still like to know where in the world they cover (I've seen reference to only 4 data centres globally). My other concern with this solution is whether it integrates into AD, so we can apply policies based on the user accounts like we do currently with the WebSense solution. The last thing is the price of this solution as it appears to be licensed based on the number of routers rather than the number of users. As our users are so spread out with only 2-3 users per router on average this is likely to mean for us this solution will be ridiculously expensive, can anyone advise if this is the case?
    My question therefore is can anyone advise on a solution for this that will work with our Cisco infrastructure in all our offices without having to purchase lots of servers for remote locations? I've seen that other vendors such as the Astaro Security Gateway have web filtering built into their products without the need for external servers, but I'd prefer to stick with Cisco if at all possible.
    Many thanks for any advice/help anyone can give me in this area.
    Paul

    Hi Paul,
    IOS Content filtering is licensed on a per router basis, you are right. So, probably that would not scale for you.
    Cisco has other solutions with Web Filtering and Ironport engines. The challenge in your setup is that each remote site would need to "call" to a central web filtering location that will be making the decision on allowing or no. Or you would need a service that scales well on a per contintent basis. There are some new Cisco web filtering options that could scale with servers almost everywhere in the world. But I don't think you can get a consice answer from this forum about your potential choices here.
    You local Cisco team will be able to provide you with these options. You are welcome to give them my email if they need to talk to me internally.
    I hope it helps a little.
    PK

  • Web filtering/monitoring

    Dear All,
    We have one customer they need web filtering and monitoring product. Please advice me what can be the best solution. They have around 300 users. Can we give them iron port or ASA.
    Your consideration in this regard will highly be commendable.
    Thanks & Regards,
    Malik

    Can you get away with whitelisting just the IP addresses and/or websites that your users need to visit? If so, you can probably use just your ASA. Otherwise you're going to want a good web filtering/proxy solution. Check out IronPort, Webwasher, Blue Coat, SurfControl, or even Squid (open source.)
    You can also tie the ASA directly into a filtering product like WebSense, check out the ASA documentation.
    When deploying a web filtering product you can either go "inline" or transparent by using WCCP redirection, but I'd suggest against it, since it breaks normal web browser behavior. Better option is to use WPAD (web proxy auto-detect) and have your browsers point-to and/or be explicitly configured to use the proxy.

  • Best Web Filter and Application control for K-12 School using Chromebooks

    Sophos UTM has good education pricing and provides all this and a lot more
    Wil replace the firewall and has excellent web filtering and application control
    Also nice features for education like allowing google apps but limiting to your google domain

    We are currently using Barracuda Web Filter (410) with a Watchguard firewall. This school year we are launching Google for Education with 160 Chromebooks to start the program.
    We need to upgrade our webfilter and are considering another Barracuda as well as Litespeed, Websense and perhaps OpenDNS. 
    is there anyone who is in a similar situation that has some recommendation?
    Here are a few more details:
    School is 900+ students
    300 wired workstations
    Active directory environment
    Ruckus Wireless with 30+ access points
    This topic first appeared in the Spiceworks Community

  • Web Filtering Cisco ASA 5510

    Hello !
    I m a netword administrator, and i have been looking how to setup web filtering in a network, we are using cisco asa 5510 as a firewall and i have been looking for a way to block url such as facebook and streaming web sites since users are allowed to access to any website and they have been downloding stuff lately and i cant controll the bandwith!!
    What u guys recommand !
    Thanks

    Hi Neji,
    Here you have all the content security options available on the ASA. I think only the CX doesn't apply to your HW but the other options are available.
    Block URLs using Regular Experessions (Regex)
    http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080940e04.shtml
    CSC module:
    http://www.cisco.com/en/US/products/ps6823/index.html
    How to enable the CSC module:
    http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/ssm.html
    ASA CX module (ASA 5512,5525,5545,5545,5555)
    http://www.cisco.com/en/US/docs/security/asa/quick_start/cx/cx_qsg.html
    Scansafe:
    http://www.cisco.com/web/about/ac49/ac0/ac1/ac259/scansafe.html
    Configuration Cisco Cloud Web Security
    http://www.cisco.com/en/US/docs/security/asa/asa90/configuration/guide/protect_cloud_web_security.html#wp1559223
    Ironport:
    http://www.cisco.com/web/about/ac49/ac0/ac1/ac259/ironport.html
    How to integrate the ASA with Ironport (WCCP):
    https://supportforums.cisco.com/docs/DOC-12623
    HTH
    Luis Silva
    "If you need PDI (Planning, Design, Implement) assistance feel free to reach"
    http://www.cisco.com/web/partners/tools/pdihd.html

  • Can Cisco connect be used for small business web filtering?

    I am searching for a web filtering solution for our small church.  The core requirement is to use a hardware-based solution to filter all internet traffic.  Our current wiring looks like this: [ISP router] --> [switch] --> [Open Mesh wireless access points].  Can I connect a Linksys EA2700/3500/4500/6500 between the [ISP router] and the [Switch], disable the Linksys wireless, and use Cisco Connect to filter all the internet traffic?
    More info: We will only have a handful of wired/wireless devices which we have control over.  We expect most of the rest of the traffic to be generally outside our control via personally owned devices connecting thru the public wifi.  Therefore any solution which requires installation of software on individual devices will not work.
    (If there are other threads on this topic I'd be more than happy to read them, I just couldn't find any.)
    Thanks!!

    Hey
    check this article:
    http://www.oracle.com/technology/pub/articles/cunningham-database-xe.html
    Regards

  • Web Filtering on a Cisco 891 Router

    I am looking for a new method of filtering our internet. We currently have 1200+ sites utilizing cisco 891 and 891w routers for their external connection to the internet. Our current method of filtering them is utilizing whitelisting for http(80) traffic and a acl with an ip list for https(443) traffic. We also have specific https websites proxied that utilize akamia servers. This method is very difficult to maintain on our large scale. Is there a better method of doing this on the router to filter both http and https traffic via URL that does not invlove allowing all 443 or 80 traffic out?

    Anthony,
    Yes it does https inspection and the portal also block based on categories (Social Networking, Gamblin; to tell a few samples), IP address and domain name.
    Get in touch with your Cisco Account Team or Cisco Partner/Reseller and get an evalution.
    HTH
    Luis Silva
    "If you need PDI (Planning, Design, Implement) assistance feel free to reach us"
    http://www.cisco.com/web/partners/tools/pdihd.html

  • Web filtering on Cisco 867 VAE K9 router

    Hi,
    how do I enable web filtering on Cisco 867 VAE K9 router with 15.1(4)M4 release? i have a message on the router : Content Filter unvailable ....
    thanks.

    Anthony,
    Yes it does https inspection and the portal also block based on categories (Social Networking, Gamblin; to tell a few samples), IP address and domain name.
    Get in touch with your Cisco Account Team or Cisco Partner/Reseller and get an evalution.
    HTH
    Luis Silva
    "If you need PDI (Planning, Design, Implement) assistance feel free to reach us"
    http://www.cisco.com/web/partners/tools/pdihd.html

  • WLC 4402 Web Authentication, Mac Filtering and Layer 2 Seciruty

    Hi All,
    I have configured web authentication and Mac filtering on WLC 4402 for my wireless network and its working fine. I wants to configure layer 2 security for the same Wireless network without pre shared key. Could you please advice how to configure layer 2 security with web authentication withour preshare key.
    Is there any security issue with web authentication and Mac FIltering only? My concern in my wireless network shows open.
    Thanks,
    Kashif

    Hi,
    if you have a ACS, then you can do Web auth Splash page!!! Please refer to the below doc!!
    http://www.cisco.com/en/US/products/ps6366/products_configuration_example09186a0080956185.shtml
    Lemme know if this answered ur question!!
    Regards
    Surendra

  • How can I set my WebI filters to Null and not Null

    Folks,
    I have created a report in WebI and now I am to set up some filters as Null and some Not Null.
    How can I set my WebI filters to Null and not Null?
    Regards,
    Bashir Awan

    Hi,
    As you said you could do it at the report level and also at the universe level.
    One more way is to create the filters in the universe levele and add them in thequery filter.
    Ex: in the filter you need to write :
    Column1 is null and and column 2 is not null etc.
    Hope this will help.
    If this did't  solve your problem then please explain it in detail.
    Cheers,
    Ravichandra K

  • CRM 2013 - Inconsistent javascript issue crash the web client and user needs to reopen

    Hello,
    We are using CRM 2013 on premise version and almost 600 users are using it. We have some inconsistent JavaScript issue (following is the log for same) which happens to users in a day or two. When this issue occurs user can not work in system and they have
    to open new instance of CRM.
    Does anybody knows about this error?
    <CrmScriptErrorReport>
      <ReportVersion>1.0</ReportVersion>
      <ScriptErrorDetails>
       <Message>Unable to get property 'location' of undefined or null reference</Message>
       <Line>1</Line>
       <URL>/_static/_common/scripts/main.js?ver=1676323357</URL>
       <PageURL>/main.aspx#313155368</PageURL>
       <Function>anonymous($p0,$p1,$p2){this.$3_3.get_currentIFrame()&&Mscrm.PerformanceTracing.write("Unload",this.$3_3.get_currentIFrame().src);this.$H_3=$p0.toString();this.$26_3();this.$1A_3();this.$1J_3();if($p0.get_isLocalServer())$p0.get_query()["pagemode"]="iframe</Function>
       <CallStack>
        <Function>anonymous($p0,$p1,$p2){this.$3_3.get_currentIFrame()&&Mscrm.PerformanceTracing.write("Unload",this.$3_3.get_currentIFrame().src);this.$H_3=$p0.toString();this.$26_3();this.$1A_3();this.$1J_3();if($p0.get_isLocalServer())$p0.get_query()["pagemode"]="iframe";addPassiveAuthParameters($p0);var$v_0=$p0.toString();if(IsNull($p2))$p2=false;var$v_1=this.$18_3($p0,$p2);if($v_1){if(this.$2z_3()){window.location.reload();return}this.$2d_3();this.$1s_3();Mscrm.PerformanceTracing.write("Navigate",$v_0);!Mscrm.Utilities.isIE()&&this.raiseEvent(Mscrm.ScriptEvents.UpdateTopLocation,null);this.$3_3.get_currentIFrame().contentWindow.location.replace($v_0)}else{this.$10_3();var$v_2=this.get_contentWindow().Sys.Application.findComponent("crmPageManager");if($v_2){!Mscrm.Utilities.isIE()&&$v_2.raiseEvent(Mscrm.ScriptEvents.UpdateTopLocation,null);var$v_3={};$v_3["sourceUri"]=Mscrm.Utilities.getContentUrl(null);$v_2.raiseEvent(Mscrm.ScriptEvents.IFrameReactivated,$v_3)}}window.self.InnerIFrameSrcChangeTimestamp=(newDate).getTime();this.title=$p1;if(window.LOCID_UI_DIR==="RTL"&&$p0.toString().indexOf("PersonalWall")>=0&&window.UseTabletExperience)this.$3_3.get_currentIFrame().style.position="RELATIVE"}</Function>
       </CallStack>
      </ScriptErrorDetails>
      <ClientInformation>
       <BrowserUserAgent>Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.1; WOW64; Trident/6.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E; InfoPath.3)</BrowserUserAgent>
       <BrowserLanguage>en-US</BrowserLanguage>
       <SystemLanguage>en-US</SystemLanguage>
       <UserLanguage>en-US</UserLanguage>
       <ScreenResolution>1366x768</ScreenResolution>
       <ClientName>Web</ClientName>
       <ClientTime>2015-04-20T15:41:12</ClientTime>
      </ClientInformation>
      <ServerInformation>
        <OrgLanguage>1033</OrgLanguage>
        <OrgCulture>1033</OrgCulture>
        <UserLanguage>1033</UserLanguage>
        <UserCulture>1033</UserCulture>
        <OrgID>{E8BBA7AE-A552-DE11-B475-001E0B4882E2}</OrgID>
        <UserID>{614837CD-448B-DE11-A5E1-005056970D6C}</UserID>
        <CRMVersion>6.1.2.112</CRMVersion>
      </ServerInformation>
    </CrmScriptErrorReport>

    Are you on-premise, or on-line? : It's on-premise
    Can you reproduce it on-demand, or is it sporadic?: It's sporadic
    There is a mention of loading an iFrame in the error, do you have iFrames on the form that generates this error?
    It's not on specific forms, so can't identify that. Yes we have iframes on some forms.
    Does it happen on any/all entity forms, or specific ones?  Do the entity forms have any custom JavaScript on them?
    It's not on specific forms. And yes we have javascript on almost all forms.
    Do you have any network problems or slowness in your network? Does the problem happen when the network is busy?
    We need to check this on next occurrence.
    Do the users that see this error have any unusual add-ins or toolbars in their browser?  This is not for specific user. Its happening for all randomly.
    Have you tried other browsers like Chrome or FireFox and do users see the problem there as well?
    We need to check only for IE.

  • HT4922 Downloaded 5.1.1. to my iphone. Now, Safari will not connect to my server.  Can not download web pages and many of my apps. Running very slow sluggish! Is there a fix? Sound like other users are experiencing same problems.  Anyone have a solution?

    Downloaded 5.1.1 to my iphone. Now, Safari will not connect to my server. Can not download web pages and many of my apps. Email seems to be ok. iphone running slow and sluggish.  I have read several other users have experienced the same problem. Any solutions?

    Basic troubleshooting steps oultlined in the User Guide are restart, reset, restore from backup, restore as new device.
    You need to go through all steps in succession until your problem is solved.  If going through ALL these steps fails to resolve your issue, then you'll need to bring your phone into Apple for evaluation and possible replacement.

  • Web Filtering, Anti-Spyware and Email Filtering in one?

    We have 4 Cisco ASA firewalls in place and currently use iMail and ISA server to filter web traffic and mail.
    I'm investigating any solutions that would interoperate well with Cisco ASAs and provide a central solution for the above needs. Has anyone had experience of WebSense and Secure Computing, or indeed the newly acquired IronPort products?
    Does anyone have any recommendations I can follow up?
    Thank you,
    Jason

    IronPort is good stuff, but it is primarily for email. I have not used it's web stuff, but it is likely not as good as WW (for example, can it inspect SSL? Can it cache? Can it do "behavioral analysis").
    Secure Computing WebWasher is good stuff. It is primarily for web. I have not used its smtp stuff, but it is likely not as good as Ironports;-)
    I have no experience with WebSense, but it is also a leader in this space.
    None provides a "central solution" in the sense that they can be managed in one interface along with the ASA's. They would inter-operate just fine with ASA's though. The ASA has a module for this too.
    http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_brochure0900aecd80402e88.html

  • ISA570 - SPAM and Web Filtering Only

    I want to use my new IAS570 for SPAM and Web filtering but not as a firewall or VPN endpoint at this time.  I want to contune to use my existing firewall for the other 2 services.  Is it possible to do this and does the ISA570 need an external IP address in order to leverage the other functions?

    Steve,
    I believe you can accomplish what you are wanting by enabling Routing Mode (Networking -> Routing -> Routing Mode).  Routing mode basically turns off NAT on the device but allows the other security functions to still continue working.  So for example, this would be your configuration to add the ISA.
    Placement
    Internet -> Current Firewall -> ISA -> Network Switch(s) -> Workstations/Servers
    Example configs
    Current Firewall
    Outside IP - 1.1.1.1 /24
    Inside IP - 10.0.0.1 /24
    ISA
    WAN1 IP - 10.0.0.2 /24
    WAN Gateway - 10.0.0.1
    LAN IP - 10.1.0.1 /24
    Workstation/Server Gateway - 10.1.0.1
    Additional Configuration
    ISA
    Networking -> Routing -> Routing Mode
    Enable
    Firewall -> Access Control -> ACL Rules
    Add ACL Rule to Permit Any Any and ensure it's at the top of the list
    Security -> Dashboard
    Disable everything except SPAM and Web Filtering
    The ISA doesn't require you to configure an External IP on it.  You just need to ensure it has Internet Access to it can continue to get updates for the services you are utilizing.
    Shawn Eftink
    CCNA/CCDA
    Please rate all helpful posts and mark correct answers to assist others searching for solutions in the community.

  • Want user to click on pic from my Web page and for it to enlarge in awindow

    I've uploaded my pic from iPhoto and placed in on my page in iWeb. I want the user to be able to click on the pic on my web page and for the page to "enlarge" so the user can see it better. Possibly in a new window.
    Is this possible in iWeb?

    There are a couple of ways. See my demo pages Fancy Zoom and Opening Item in New Specially Sized Window. Both will do what you want. The code uses is also described.
    OT

Maybe you are looking for