IronPort - access without login from a specific address IP to one website

Hello
I must configure ironport but a needs your help
I want get access (without user authorization) from a specific address IP only to the facebook website. Other sites must be not available.
It is possible?
Thanks!

Yes. There are a couple of ways to do this...
1. Under Web Security Manager/Identities, create a new identity, put the IP in it. Select No authentication or identification for it.
2. Under Web Security Manager/Custom Categories, create a new category, put facebook.com in it.
3. Under Web Security Manager/Access Policies, create a new policy and select the new identity you created in step 1
4. Then for URL Filtering, set the "facebook" custom category to monitor, and under Applications, enable all of the applications. (You want to use monitor so that the WSA still does the AV/antimalware stuff).

Similar Messages

TS3276 Most attachments from a specific address (work) can not be opened, identified as winmail.data and no data available. Not sure if this is based on the e-mail coming from a windows based system, too old of a windows based system or simply how i have

Most attachments from a specific address (work) can not be opened, identified as winmail.data and no data available. Not sure if this is based on the e-mail coming from a windows based system, too old of a windows based system or simply how i have it set on my Mac.

Brightbleu wrote:
Most attachments from a specific address (work) can not be opened, identified as winmail.data and no data available. Not sure if this is based on the e-mail coming from a windows based system, too old of a windows based system or simply how i have it set on my Mac.
Winmail.data are not usable files. They just preserve RTF within the message.
http://support.microsoft.com/kb/278061
Cheers
Pete

Getting ssh_exchane_identity error when trying to login from my machine or a remote one. Already enabled remote login

I updated my system from Snow Leopard to Lion 7.3.1
Wanted to login from remote computer and then enabled the remote login in Preferences/Sharing, but when trying to login I get the error ssh_exchange_identification also if I try to login from my machine with ssh username@localhost.
I tried all what I could find on internet forums, but nothing changed.
Please help!!
Daniela

Hi Linc
here is the output of ssh -vvv localhost
OpenSSH_5.6p1, OpenSSL 0.9.8r 8 Feb 2011
debug1: Reading configuration data /etc/ssh_config
debug1: Applying options for *
debug2: ssh_connect: needpriv 0
debug1: Connecting to localhost [::1] port 22.
debug1: Connection established.
debug3: Not a RSA1 key file /Users/danielamaurizio/.ssh/id_rsa.
debug2: key_type_from_name: unknown key type '-----BEGIN'
debug3: key_read: missing keytype
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug3: key_read: missing whitespace
debug2: key_type_from_name: unknown key type '-----END'
debug3: key_read: missing keytype
debug1: identity file /Users/danielamaurizio/.ssh/id_rsa type 1
debug1: identity file /Users/danielamaurizio/.ssh/id_rsa-cert type -1
debug1: identity file /Users/danielamaurizio/.ssh/id_dsa type -1
debug1: identity file /Users/danielamaurizio/.ssh/id_dsa-cert type -1
ssh_exchange_identification: Connection closed by remote host
[1]+ Done edit sshd_config
The following line comes from /var/log/secure.log
May 23 04:59:46 <danielamaurizio> sshd[2267]: fatal: /var/empty must be owned by root and not group or world-writable.
but I'm not sure if it's want you asked me; the owner of /var/empty is root of group sys.
By the way I had a problem that Lion cancelled the owner root and I had to use System Preferences User and groups to add root again, with the result that now I can use only the comman "su root" and not "sudo anycommand" anymore.
Thanks for halp and cheers
daniela

Remote web access without login

Hello experts,
we have an external web application that handles the user access. Now we have the request to call a BI web template without asking for a new login. Some parameters will be passed to the BI, too.
I remember that it is possible to add a user or user tag to a web template, but I don't remember how this could work.
Has anybody an idea to solve this request?
Thanks in advance
Ansgar

Hi,
Please check the note:
1059623 Re-logon required when launching BEx Web App from BEx Tools
You are using BEx Tools (BEx Query Designer, BEx Web Application
Designer, BEx Analyzer or BEx Report Designer). Executing a BEx Web
Application from one of the tools, you are prompted again to enter user
and password information, although you have already logged on to BEx
Tools.
As a workaround you can leave the Web browser instance open after
logging on once. By doing so, you won't be prompted for re-logon when
you launch a BEx Web Application from BEx Tools for the second time.
So its working as per the SAP design. Still you have issue please
get back to us.
701205 - Single Sign-On using SAP Logon Tickets.
For further information on the same please take a look at the following:
Single Sign-on using SAP Logon tickets
http://help.sap.com/saphelp_ep50sp6/helpdata/en/89/6eb8e1af2f11d599370
0508b6b8b11/frameset.htm
Regards,
Venkat

TS4036 Accessing iCloud account from old email address that's no longer active

HELP! My iPhone 5 screen died and Apple cannot repair it. The phone still works and it is under warranty but I am having difficulty getting my calendar, notes and contact info. I was able to download the pictures on to my PC at home using iTunes but not the data. When I go to iCloud I get a message telling me to go to a message sent to the original email account used when I purchased my first apple product (laptop) but I no longer have access to that email account. I have set up other iCloud accounts since then but seem to going in circles trying to find this very important data. Before I return the damaged phone for replacement I want to make sure I have exhausted every resource. Does anyone have any suggestions?
Thanks!

To change the iCloud ID you have to go to Settings>iCloud, tap Delete Account, provide the password for the old ID when prompted to turn off Find My iPhone, then sign back in with the ID you wish to use. If you don't know the password for your old ID, or if it isn't accepted, go to https://appleid.apple.com, click Manage my Apple ID and sign in with your current iCloud ID. Click edit next to the primary email account, change it back to your old email address and save the change. Then edit the name of the account to change it back to your old email address. You can now use your current password to turn off Find My iPhone on your device, even though it prompts you for the password for your old account ID. Then save any photo stream photos that you wish to keep to your camera roll. When finished go to Settings>iCloud, tap Delete Account and choose Delete from My iDevice when prompted (your iCloud data will still be in iCloud). Next, go back to https://appleid.apple.com and change your primary email address and iCloud ID name back to the way it was. Now you can go to Settings>iCloud and sign in with your current iCloud ID and password.
Note: this will only work if the old ID is yours, and if your new ID was created by editing the details of this old ID (rather than being an entirely new ID).

How to block email from a specific address?

What are the steps required to block email?

Hi johnav,
Although I'm not finding a setting to block an "incoming" email address like you can for FaceTime calls but you can set up a rule to automatically delete email from a particular email.
Use rules to manage your inbox - Mail Help
Would that work for you?
Best,
Nubz

I receive certain emails from a specific address but not other emails.

I receive some emails from Berkeley Parent Network, such as Advice but not the Marketplace email. here is information from their site: Your email service may allow you to add email addresses to a "white list" that you want to accept mail from. The sender on all the BPN newsletters is "[email protected]". The newsletters are actually mailed from chignik.berkeley.edu (IP address: 169.229.248.172)
== This happened ==
Not sure how often
== a few months ago

Hello Faith.
Although possibly not related to your problem, I will remind you that the version of Firefox you are using at the moment has been discontinued and is no longer supported. Furthermore, it has known bugs and security problems. I urge you to update to the latest version of Firefox, for maximum stability, performance, security and usability. You can get it for free, as always, at [http://www.getfirefox.com getfirefox.com].
As for your issue, I'm not sure I understand it correctly, but I think you may want to contact the sites administrator directly?

Access purchases using from old email address with current ID

I have some songs that cut out part way through because they didn't get downloaded fully when I switched hard drives or something. I purchased them from the iTunes store with my own Apple ID, but it was when my Apple ID was associated with a different email address. I changed my email address on my account when I deactivated my old address. I can't log in to the Apple Store with the old address because Apple doesn't recognize it as being valid.
These past purchases don't show up in my purchase history, even though older ones do, also from my previous . I'd like to re-download the songs so that I have the full versions. Does anyone have any ideas about how I can do this? Thank you!

Thanks for the response.
My iTunes account window doesn't show the Unhide option as the example in the link does. I'm guessing that's because I haven't hidden anything, but maybe there's another explanation? It would be great if that were the answer.
The main album I'm hoping to re-download is still available in the store. The really frustrating part is that I've downloaded stuff from the cloud that I originally purchased as many as 8 years ago, but this one album that I bought in 2012 won't cooperate.

TS3899 Mail not getting messages from specific address

I am consistently not receiving emails from a specific address in my Apple Mail inbox, but I have no filters enabled and the emails are not showing up in my spam and trash folders. If I follow directions for retrieving an email header in Gmail, I am able to see the email, but this doesn't correct the problem! This problem seems to have surfaced spontaneously. What is going on?

HI ,
have at look at this link :
https://www.sdn.sap.com/irj/scn/wiki?path=/display/xi/step%252bby%252bstep%252bmail%252bto%252bfile%252bscenario
It contains the scenarios with "Mail to File Scenario using the Transport Protocol as IMP4 " as well as "Mail to File Scenario using the Transport Protocol as POP3".
Have a look at them.
Thanks,
Pooja

OA Page access without attaching to any responsibility

All,
I have developed a page where employees can select the gift items. But this selection is possible only on their anniversary day. The page access link should not be available at any time.
So the plan is to send the page access link to them by email on their anniversary date.
The problem is, if I didnt attach this page function to any responsibility, the users will not able to access the page from the email link. (Insufficient privileges)
Is there any way to achieve dis without attaching to any responsibility. Or after attaching to responsibility, is thr any way to hide the link for the user when thy login into APPS?
thr r few workarounds like, give access to all, and on pageLoad check for their anniversary date and then allow if applicable..
Lemme know if there is any way to achieve that before going for the abv mentioned workaround..
- Senthil

Hi,
You want to develop a custom OAF page which can be accessed without login, You can develop using Anonymous or Guest Login implementation. If you want more details please give me your mail id i will send you the document about that.
Mukul/Tapash,
What i have told is about Anonymous or Guest Logins, i think i have discussed about this earlier.
Page Supports Anonymous or Guest Logins :
If you have a Guest user page to display that does not require a user to log in, then you should secure your page with a GUEST user permission. You should also have a explicit grant/function/responsibility assigned to the GUEST user. Note: GUEST is a special seeded user in the Oracle Applications Users form.
In our example, the Benefits Registration Page is an example of a Guest user page. To create a Guest user page:
Step 1: Set the Security Mode property of your page to Self secured.
Step 2: Implement the validateParameters() method in your controllers to protect the integrity of the URL.
Tip: Note that the above two steps are required because your page should exist outside a user's session, and is therefore "bookmarkable". You can find more information on how to set up bookmarkable pages in the Accelerated Validation topic.
Step 3: Set a permission on the rendered attribute of your page layout region using a function security SPEL expression.
So, in our example, let's create a permission called BENEFITS_GUEST, and set the expression ${oa.FunctionSecurity.BENEFITS_GUEST} on the Rendered property of the Benefits Registration Page. We will learn about how to associate this permission with a grant to the GUEST user in the subsequent steps.
The OA Framework requires no authentication and authorization to run a page that is secured using a GUEST user-granted permission.
Note: Although a GLOBAL-granted permission would seem logical to use, it actually is not appropriate in this case. All users except the GUEST user have access to pages that have a GLOBAL grant. In addition, GLOBAL users must first log in and be authenticated in order to access those globally-granted pages.
Thanks.
With Regards,
Kali.
OSSI.

Blocking emails from a particular address

Is it possible to block emails that come from a specific address? For example, is it possible to block an email from a particular gmail address, and have that email bounce back to the sender?

Mail menu > Preferences > Rules > Edit Rule... > enter criteria in fields and save.

About the error: "The account is not authorized to login from this station" when you access NAS devices from Windows 10 Technical Preview (build 9926)

Scenario:
With the release of Windows 10 Technical Preview (build 9926), some users may encounter an error message of “The account is not authorized to login from this station” when trying to access remote files saved in NAS storage. In
addition, the following error log may also be found via Event Viewer:
Rejected an insecure guest logon.
This event indicates that the server attempted to log the user on as an unauthenticated guest but was denied by the client. Guest logons do not support standard security features such as signing and encryption. As a result,
guest logons are vulnerable to man-in-the-middle attacks that can expose sensitive data on the network. Windows disables insecure guest logons by default. Microsoft does not recommend enabling insecure guest logons.
Background:
The error message is due to a change we made in Windows 10 Technical Preview (build 9926) which is related to security and remote file access that may affect you.
Previously, remote file access includes a way of connecting to a file server without a username and password, which was termed as “guest access”.
With guest access authentication, the user does not need to send a user name or password.
The security change is intended to address a weakness when using guest access. While the server may be fine not distinguishing among clients for files (and, you can imagine in the home scenario that it doesn’t
matter to you which of your family members is looking at the shared folder of pictures from your last vacation), this can actually put you at risk elsewhere. Without an account and password, the client doesn’t end up with a secure connection to the server.
A malicious server can put itself in the middle (also known as the Man-In-The-Middle attack), and trick the client into sending files or accepting malicious data. This is not necessarily a big concern in your home, but can be an issue when you take your
laptop to your local coffee shop and someone there is lurking, ready to compromise your automatic connections to a server that you can’t verify. Or when your child goes back to the dorm at the university. The change we made removes the ability to connect
to NAS devices with guest access, but the error message which is shown in build 9926 does not clearly explain what happened. We are working on a better experience for the final product which will help people who are in this situation.
As a Windows Insider you’re seeing our work in progress; we’re sorry for any inconvenience it may have caused.
Suggestion:
You may see some workarounds (eg. making a registry change restores your ability to connect with guest access).
We do NOT recommend making that change as it leaves you vulnerable to the kinds of attacks this change was meant to protect you from.
The recommended solution is to add an explicit account and password on your NAS device, and use that for the connections. It is a one-time inconvenience,
but the long term benefits are worthwhile. If you are having trouble configuring your system, send us your feedback via the Feedback App and post your information here so we can document additional affected scenarios.
Alex Zhao
TechNet Community Support

Hi RPMM,
Homegroup works great in Windows 10 Technical Preview (9926 build), when I invited my Windows 10 Technical Preview (9926 build) joined in HomeGroup, I can access the shares smoothly:
My shares settings is like this:
Alex Zhao
TechNet Community Support

How to prevent/allow admin access from certain ip address.

Hello
trying to setup the following scenario:
have a user BOB created in Cisco ACS 4.2
have several network devices with different management IP addresses all added in Cisco ACS 4.2
want to be able to allow BOB to access network devices only if BOB's access request is coming from one ip address 1.1.1.1
If BOB is trying to access network devices from any other ip addresses, the request should be denied regardless of the fact that BOB has full access to all network devices.
Is there a way to acomplish this using Cisco ACS 4.2
Appreciate your input.
Regards,

It is actually possible, thanks for your doc reference:
in ACS setup AAA client user will be allowed to call from
in ACS setup NAR (devices you want to allow access to);
create user in ACS
configure user access in ACS:
     allow access to required NARs
     define IP - based access restrictions
          Permitted calling / point of access locations
               enter AAA client from which user will call (* for ports and * for ip address)
Save and test
In failed attempts you should see Authentication failure code "Users access filtered" when trying to login to NAR devices with new username and from non-permitted calling client/ip address.
Thanks for you help.

Is there a way to access OSX directly from Parallel Desktop - without a password?

Hi guys.
My dear late brother had left his Mac Mini when he chose to exit this world.
All the while - his Mac Mini was still on and running.
After a while when having to pack his belongings, I noticed this and tried to login - but all the passwords I've tried were wrong.
Meanwhile I had to shut his Mac off - and when later on turned it on again - it went straight to Parellel Desktop (running Windows)..
I noticed there were some files on it - through My Computer :// ...
But all those files which are found on the above folder etc. - is that all files available on the Mac including files on OSX??
So my question goes: The files found on My Computer :// (running Windows) - are they the exact files which can be seen on OSX or is it possible that there's more files available when running OSX??
One more question : Is it possible to access OSX directly from Parallel Desktop - without having to type any password on OSX?

Thanks for the info.
So that must mean - there may be more files available on the OSX partition then..?
But seeing that it requires a password (login) in order for me to access the OSX system - is there any chance of getting access to all the data, without losing them?

I cannot access anyone from my global address book, not even through the search. Any suggestions? iOS 7.0.4

I cannot access anyone from my global address book, not even through the search. Any suggestions? iOS 7.0.4
I could access this before.

mouse1832 wrote:
I've been to apple to speak to one of the so called genius' and even their baffled by the problem
and they told you , "Oh well" and you left without getting it resolved?

IronPort - access without login from a specific address IP to one website

Similar Messages

Maybe you are looking for