Mobile Web Security

What is the piece of the WSA product that allows my mobile clients to be monitored and protected from the web threats when not on the local network? Is it just WSA cloud security?
How does this work? Do I push my local network WSA policy to a web based controller to replicate my organization policy and they sync to the cloud for it?

You can get mobile clients covered a couple of ways:
1. in a 'hybrid' mode, where you put the web client module on them (part of Anyconnect), which redirects traffic to the Cisco Cloud Web Security.  There is a seperate license for this.
2. When vpn'd in via Anyconnect, you can tell the ASA to change the client's proxy settings to go to the WSA and they'll use the WSA's explicit mode to get filtered (explicit mode is always enabled on a WSA, even if you're using WCCP...)  This doesn't cover then when they aren't VPN'd in...

Similar Messages

  • OTN Mobile Web Service and Cingular Wireless

    Has anybody gotten the SMS message service to work with Cingular Wireless? It doesn't seem to work for me. Cingular's format is "[email protected]" and messages are received fine if I email to this address. Doesn't the OTN Web Service need to be updated on the server side, Oracle?

    OTN Mobile web service is down due to some security concerns. It will be brought back later sometimes.
    check this posting
    OTN Mobile Web Services - Live Web Services on OTN
    Chandar

  • Missing mobile web app on reality

    I just took over my mom's samsung reality. went to the store and had the number changed, etc.
    when i try to get on the mobile web app, it simply says "no application." when i go to the "get it now" to download it like the verizon page says to, it can't find any mobile web app.
    I know my mom had the app before she gave me the phone and used it a little bit. i don't understand why i can't access it. help please! i need mobile access to my email!!

    It seems it may have been deleted in a system error. A hard reset should resolve this. The steps for this are listed below:
    -From the standby screen, press Menu
    -Press Settings & Tools
    -Press Phone Settings (7)
    -Press Security (8)
    -Enter the lock code, default password is the last 4 digits of Cell phone number
    1. Do software reset: Press Reset Settings (6)
    -Press Yes to confirm resetting the handset to factory default settings
    -The phone will now restart
    2. Do hard reset: Press Restore Phone (5)
    Press Yes to confirm resetting the handset to factory default settings
    Press OK at the reprogram prompt
    Enter the lock code, default password is the last 4 digits of cell phone number
    Note: Press *228 and SEND after the power cycle to re-program the phone

  • Downloads for different products e.g., Crawler Web Security won't take

    I attempted to download different toolbars and products such as from Crawler's Spyware and Web Security without any luck. It goes through the usual set-up windows and a window opens up to say that the downloads have been successfully completed. I cannot find them!

    Does the ext directory have the php_oci8.dll? In the original steps the PHP dir is renamed. In the given php.in the extension_dir looks like it has been updated correctly. Since PHP distributes php_oci8.dll by default I reckon there would be a very good chance that the problem was somewhere else. Since this is an old thread I don't think we'll get much value from speculation.
    -- cj

  • Why do I get the error message "unable to load page (HTTP 502) when I try to open Mobile Web?

    I have an LG Octane 3 basic phone.   Does everything I need, phone and text, and I never was interested in web or e-mail capabilities until I recently upgraded our plan to the "More Everything" and was able to use data and check e-mail and access the internet.   Whenever I try to open Mobile Web, I get the error message "unable to load page (HTTP 502)".    As of March 31, 2015, all of us basic phone users lose the "Mobile Email" app on our phones, and will have to access web versions of our e-mail via the web.  Which is currently unavailable and doesn't work.
    Over a week ago, did a chat session with a tech support rep, and she indicated that either she or an engineer would contact me with how to fix the problem.   Have not heard anything from anybody, and the deadline is approaching quickly.   Have no need of all the excess features of a smart phone, nor do I wish to be forced to jettison a perfectly working phone for my needs and buy something I don't want to be able to do 2 simple things.............check e-mail to see if there's something that needs to be answered right away, and to check traffic reports when I'm on the road, or find something in an area with which I'm not familiar.     Not really too much to ask, you would think....   )
    Has anyone else had this same problem, and if so, how do we fix it....???  My next move is a phone call, but those haven't always been very productive.
    If any of you have any ideas why this error keeps coming up and the web can't load, and some on how to fix it, I would really appreciate some advice.
    Thanks in advance.
    Karen

    Since the chat session got no reply, I contacted Verizon by phone and a very nice level 2 tech created a trouble ticket and sent it up the food chain.  Got a call back, maybe 2 days later, and had a nice, although very long session with a higher level tech.  They had determined that the browser for the LG Octane is an old one and no longer supported by Verizon.    We tried everything we could to download the Opera browser, but since I was totally unable to get Mobile Web to work, couldn't do it.   The only other possible "fix" was to totally reset the phone to factory specs and try it again.   That would mean a lot of work on my part to move anything I didn't want to disappear off the phone, and find a place to forward texts that had to be saved.   Caught our tenants lying about why the rent was late (again), and need that for when I put them back on a lease....  
    Long story short is that unless we try this total reset, which isn't a sure fix, either, anyone who isn't able to access the Mobile Web with the LG Octane will have to change their plan to avoid paying for data that you can't access using any method. 
    I ran a test with an app that I knew was no longer valid.....that was sending photos to PixPlace.   Got the exact same error message as when trying to access Mobile Web to get the web version of my e-mail.   That just verified that the 502 error is, at least in the LG Octane, for an app that no longer works.   After today, we'll get the same thing when we try to access Mobile E-Mail.
    Have to admit, it's a real ****-off, but this shouldn't surprise me, since Verizon won't repair older copper phone lines if you are in an area where FIOS is offered. 
    I am going to immediately change my husband's and my cell phone plan to one without data, and see what I can find that will still give unlimited calls and text.  The way my luck runs, they won't offer one for a decent price.  The other half has some very long-winded friends and he was always running over minutes, and some months are very text-heavy and I'd go over my limit.   Absolutely HATE touch screens, and am not looking forward to having to get a new phone.  

  • Creating mobile web dynpro application which customized theme

    Hi guys,
    I have created a mobile web dynpro application and a theme with Theme Editor. Then I have appended this theme with the sap-cssurl parameter to my application.
    <b>my_application? sap-cssurl=http://host:port/webdynpro/resources/sap.com/tcwddispwda/global/SSR/themes/MyTheme</b>
    It works well in my first testing on my laptop.
    In order to test it on my mobile device I have also appended sap-wd-client parameter to my application. Now my URL looks like
    <b>my_application? sap-cssurl=http://host:port/webdynpro/resources/sap.com/tcwddispwda/global/SSR/themes/MyTheme&sap-wd-client=PieClient</b>
    It doesn’t work. My application layout looks as if I don’t use the theme. Did somebody have the same problem and can help me by finding a solution.
    Thanks for your answers.
    Marita

    Hi Marita,
    Mobile Web Dynpro supports several handheld mobile devices. I guess yours is a Pocket PC. Except the newest Pocket PC 2003, all the other versions don't have CSS support. Therefore the current Pocket PC client "PieClient" of Web Dynpro lacks the ability for customized themes. On the other hand, themes are supported for more advanced devices, such as Nokia Communicator 9500/9300.
    Regards,
    Wei

  • Warning System spameater Unable to connect to Cisco Web Security Service.; URL Filter...

    My C670 ESA's have been throwing these alerts intermittently for the past few days, anyone else seeing them?
    The Warning message is:
    Unable to connect to Cisco Web Security Service.
    URL Filtering will not work correctly.
    Please verify all network, proxy and firewall settings.
    Connection to "v2.sds.cisco.com" failed.
    The last error seen on this connection: "Request failed with code: 28 (Connection time-out)"
    Version: 8.5.6-092
    Looks like it is open on port 443 and currently up.  Hitting it with a browser gives me:
    https://v2.sds.cisco.com/
    After an error or two they go away and appear OK.   
    Checking the logs I don't see a way to verify URL lookups are working, is there a way?
    Also, I setup URL filtering six months ago and had it set to only trigger on (-10)-(-9.5) and saw about an 80% false positive.  It has improved over the past six months drastically but still catching mostly advertising URLs and allowing all phishing URLs right through.  I've yet to see it block a phishing URL.
    Jason

    After lots of trial and error, I was able to eliminate this problem.  What I wound up doing is defining the XE service again in the listener.ora file:
    SID_LIST_LISTENER =
      (SID_LIST =
        (SID_DESC =
          (SID_NAME = XE)
          (ORACLE_HOME = C:\ProgramData\oraclexe\app\oracle\product\11.2.0\server)
    I know that typically you should not have to do this, especially since I already had defined DEFAULT_SERIVCE_LISTENER = (XE) at the bottom of the listener.ora file.  Explicitly defining the XE service in the listener.ora file allows the listener to find it while the system is running under the Cisco AnyConnect VPN.  The only hiccup I found by doing this is that the XE service is discovered twice by the listener when the system is NOT running under the Cisco AnyConnect VPN.  It still works OK.  The listener just seems to ignore the repeated definition of the XE service (see output below):
    C:\ProgramData\oraclexe\app\oracle\product\11.2.0\server\bin>lsnrctl service
    LSNRCTL for 32-bit Windows: Version 11.2.0.2.0 - Production on 13-JUN-2013 10:03:15
    .......(omitted output).......
    Service "XE" has 2 instance(s).
      Instance "XE", status UNKNOWN, has 1 handler(s) for this service...
        Handler(s):
          "DEDICATED" established:0 refused:0
             LOCAL SERVER
      Instance "xe", status READY, has 1 handler(s) for this service...
        Handler(s):
          "DEDICATED" established:0 refused:0 state:ready
             LOCAL SERVER
    Service "XEXDB" has 1 instance(s).
      Instance "xe", status READY, has 1 handler(s) for this service...
        Handler(s):
          "D000" established:0 refused:0 current:0 max:1022 state:ready
             DISPATCHER <machine: DEV-M-137GF, pid: 5544>
    (ADDRESS=(PROTOCOL=tcp)(HOST=DEV-M-137GF.paychex.com)(PORT=58257))
    The command completed successfully
    If anyone has a cleaner solution for this problem, please let me know.  Otherwise, I am moving forward with what I did.
    Thanks.....Paul

  • I cannot watch video's in the mobile web without a currect flash player for mobile phone! what virsion of player i need?

    I can't watch video's in the mobile web without a currect flash player for mobile phone's. what do I need to do(what is the currect virsion)?
    If you have an answer just send it to me by e-mail!
    [email protected]

    If you find anything out please share.  I have flash projects (SWF) files created in Captivate 5 that play fine in Flash and Dreamweaver, but freeze up on the web in safari, firefox, opera and chrome.  Even files that used to play just fine.  This upgrade has been a nightmare - I have spent hours troubleshooting to no avail.  It does not seem to be a problem for windows users - only macs.

  • SAP.Web.Security.TicketException: MYSAP_INVALID

    We recently updated our portal to the following:
    J2EE Engine 6.40 PatchLevel 108290.313
    Portal 6.0.20.0.0
    Previously sap.web.security dll worked fine but now I get this exception
    SAP.Web.Security.TicketException: MYSAP_INVALID
    I have tried all the suggestions in this forum and nothing works.  Does anyone have the orginal source code for this dll or a working solution ?
    the following code does get the ticket if I remove the handler from the web.config.....
                Dim cookieString As String = HttpUtility.UrlDecode((Request.Cookies("MYSAPSSO2").Value).Replace("!", "%2B"))
                Dim ticket As SAP.Web.Security.MySapSso2Ticket = New SAP.Web.Security.MySapSso2Ticket("verify.pse", cookieString)
                Dim objUsr As SAP.Web.Security.MySAPSso2Identity = New SAP.Web.Security.MySAPSso2Identity(ticket, cookieString)
    so why does the handler fail ?  driving me crazy.

    Ok so I added the code to the wiki in the attachment area. Hopefully Wiki mods don't delete it.  This works perfectly for our purposes and config.
    https://www.sdn.sap.com/irj/sdn/wiki?path=/display/snippets/home&
    SSOTest.rar.jpg
    PortalSecurity.rar.jpg
    Right Click and save the files then remove the .jpg extension.  Open with WinRAR or Winzip.
    You will have to generate your own public key so take a look at the assemblyinfo.vb file.
    Steps to create your own public key
    C:DevelopmentPortalSecurityKeyFile>sn -k keyfile.snk
    Microsoft (R) .NET Framework Strong Name Utility  Version 1.1.4322.573
    Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.
    Key pair written to keyfile.snk
    C:DevelopmentPortalSecurityKeyFile>sn -p keyfile.snk publickey.snk
    Microsoft (R) .NET Framework Strong Name Utility  Version 1.1.4322.573
    Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.
    Public key written to publickey.snk
    C:DevelopmentPortalSecurityKeyFile>sn -t publickey.snk
    Microsoft (R) .NET Framework Strong Name Utility  Version 1.1.4322.573
    Copyright (C) Microsoft Corporation 1998-2002. All rights reserved.
    Public key token is [should display your Public Key Token]
    Other config...May not be necessary as you can change the code to do whatever you want.
    - Note 442401 - Web server filter for SSO to third-party systems
      (https://service.sap.com/sap/support/notes/442401)
    Extract the zip file attached to this SAP Note.  Follow the instructions in the SAP Note and the instructions in the "filterdocs" directory of the unzipped files. 
    For our environment, I copied the iss6_sso.dll (for IIS 6) and the verify.properties files into the "inetpubscripts" directory.  (There is a "verify.properties" file attached tot the source for your reference).  Note the reference to a verify.pse file in the 'verify.properties' file.  It should point to wherever the verify.pse file is, which in our case is "c:secverify.pse".   I also copied the WPSSO_V3.DLL file from the "C in
    ti386" directory to the system32 directory. 
    - Note 304450 - Single-Sign-On with SAP logon tickets in non-SAP systems
      (https://service.sap.com/sap/support/notes/304450)
    This SAP Note points the developer to SAPSSOEXT in SAP's software download area.  Use SAPCAR to unzip the downloaded file and follow the instructions in this SAP Note and the instructions in the DOCS directory (a PDF and a README.TXT file). 
    PDF Note:  The comments portion of the MySapEvalLogonTicketEx function declaration (Section 3.2 of the PDF) indicates that an environment variable named SSF_LIB must be created/exist.  It should point to the location of the SSF-compliant security library (ie: SAPSECU.DLL in the system32 directory).

  • Acces key problem in Mobile web application

    Hi experts,
    I am just trying a mobile web application according to the link given below:
    /people/john.moy3/blog/2010/11/21/build-your-first-mobile-web-app-using-jquery-mobile-and-abap--part-2
    tutorial by John Moy.
    While reimplementing the controller class i am getting one message "Method DO_INIT is implemented in class CL_BSP_CONTROLLER" and asking for Access key.
    Why this is happening and how i can overcome this problem?
    Please help me.
    Arun

    Use REDEFINE key....

  • Problem with the Installation of Mobile Web Server...

    I have a N95. I have been trying to install Mobile Web Server on it. The installation fisnishes but the icons are all separeted and there is no only one icon for the program (MWS, MWSChat, MWSBlog, MWS).
    Reading the manual of the software I realized that something should run after the installation but nothing is
    executed. I tried to install it on memory card, main memory
    >with no success. Is there any bug reported about it?

    Hello, this is a known problem with new 1.2 release. Please refer to my blog post and stay tuned for a fix.
    http://blogs.s60.com/mws/2008/01/mobile_web_server_new_release.html

  • Ask the Expert:Cisco Web Security

    With Ryan Wager
    Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn about design, configuration and troubleshooting of the Cisco Web Security Solutions including Cisco Ironport WSA and Cisco ScanSafe with Cisco experts Kiran Sirupa and Ryan Wager. Kiran Sirupa is a technical marketing engineer in the product marketing team for the Cisco IronPort Web Security Appliance product line. He also works on documentation, partner ,and system engineering training. Kiran has been working in the Cisco Security Technologies group for more than six years. Ryan Wager is a technical marketing engineer at Cisco in the product management team for the ScanSafe Web Security platform. He is heavily involved with the product's integration with the Cisco Integrated Services Router Generation 2 platform, along with documentation, training, and testing of all new products and features. Before joining the product management team, Wagner spent two years as an implementation engineer helping ScanSafe's largest customers implement the platform into their networks.
    Remember to use the rating system to let Kiran and Ryan know if you have received an adequate response.  
    They might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Security sub-community, discussion forum shortly after the event. This event lasts through October 7, 2011.. Visit this forum often to view responses to your questions and the questions of other community members.

    Yes, the IronPort WSA will support all the security functions including Anti-Virus, Anti-Malware, Anti-Spyware, Web Reputation when working in conjunction with an existing proxy.
    There are two conditions:
    1. WSA acts as an upstream proxy - In this case, the authentication will be handled by your existing proxy, but the WSA is the first layer of defense. The WSA will perform a lookup in its web reputation database based on the destination. Also, The WSA can scan the http response with Anti-Virus, Anti-SpyWare and Anti-Malware software. However, since the WSA doesn't have user authentication information, you can only apply global controls for Acceptable Use.
    2. WSA has to go through an existing upstream proxy - In this case, the WSA has all the security functionality. In addition, it also handles the authentication. Hence, you can apply role based controls.
    You may refer to the following links for more information:
    WSA Product Literature: http://www.cisco.com/en/US/products/ps10164/prod_literature.html
    Cisco Security Reports: http://www.cisco.com/en/US/prod/vpndevc/annual_security_report.html
    Cisco Security Intelligence Operations: http://tools.cisco.com/security/center/home.x

  • Cisco ISE or NAC Guest with web security (IronPort) integration

    All,
    We have a scenario where guests will be authenticated against the ISE or NAC Guest server, and customer will place an IronPort to provide web security, however, we can not find referentes whether IronPort can or cannot integrate with Guest Server, so that guests are not requested to be authenticated twice, one by the Guest Server, a one by the proxy. The idea is to keep it transparent for the guests with a single authentication.
    Has anyone there implemented such scenario?
    Thank you!

    I see. So, lets say we disable proxy authentication for the guest segment, can I still provide content filter for the segment, even though there is no proxy authentication? I assume customer will lose the reportinga and tracking granularity, but the scenario will work withou proxy authentication. This may be some sort of "man in the middle" only, but with content filter. Does it make sense?
    Thank you!

  • Ask the Expert: Service Delivery Manager for Cloud Web Security with Alex Chan

    Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about the recommended practices for Cisco Cloud Web Security (CWS).  Cisco Cloud Web Security (CWS) provides industry-leading security and control for the distributed enterprise, with Cisco expert Alex Chan.
    October 27, 2014 through November 7, 2014.
    Learn how users are protected everywhere and anytime, when using CWS through Cisco worldwide threat intelligence, advanced threat defense capabilities, and roaming user protection. Create a virtual space to learn and ask questions about best practice when implementing Cloud Web Security offerings for various customer requirements and environments. Alex will also answer questions about Easy ID, CWS as SAML Service Provider, Deployment Options (such as ASA, ISR, WSA, Workgroup based Connector and AnyConnect Web Security agent.
    Remember to use the rating system to let Alex know if you have received an adequate response.
    Because of the volume expected during this event, Ali might not be able to answer each question. Remember that you can continue the conversation on the Security community, sub-community shortly after the event. This event lasts through November 7, 2014. Visit this forum often to view responses to your questions and the questions of other community members.

    Cisco CWS platform is one of the Cisco products that maintain collaboration with Cisco PSIRT, and there are few security vulnerabilities related to CWS were being monitored by PSIRT, which you can find out more about in: http://tools.cisco.com/security/center/home.x#~blog.
    Another Cisco entity known as "SenderBase" that is powered by Cisco Security Intelligence Operations (SIO) will provides a view into virus threat intelligence collected from CWS cloud traffics. For more information about "SenderBase", please visit this web site: http://www.senderbase.org

  • Adding SAN through web-security and Creating CSR for Tomcat (CUCM 10.5) to be signed by Third Party CA

    Hi Guys,
    Wondering if Any one has done this or could suggest the needful,
    We are running CUCM 10.5 cluster and currently using self-signed certificate for Tomcat. Now, we would like to get it signed by Third party CA.
    Just to be clear that we are doing this for Jabber clients so they should not get prompted for certificate Invalid.
    Now the issue; The CUCM is using IP address as hostname and for that reason we had to add the desired IP address under SAN (alternate name) through set web-security command. We did that successfully and restarted the Tomcat service and when we run the Show web-security command, it does show the added SAN;
     altNames: 2 names
              1) UCS-CUCM-UB.domain (dNSName)
              2) 10.x.x.x (dNSName)
    But when we try to generate the new CSR, it didn't contain the modified SAN, just the first one i.e only 1) UCS-CUCM-UB.domain (dNSName)
    Is there anything we missed here to get the added SAN being populated in the new CSR ?
    Regards
    M

    Hi Gordon,
    Thank you for your prompt response. For recommendation, you are right but we don't want to initiate that change for now unless, there is no other option left.
    While Generating new CSR, under SAN, there is only Parent Domain field which is populated with our domain name. How should I add the IP address there ?
    Regards

Maybe you are looking for