URL filtering replacing with web usage control

I come to know the URL filtering in ironport is replacing with the advanced web usage control. May i know from which version its introducing? Any upgradation procedure?
What are the changes will take place after the upgradation & what kind of functionality will be available with Web Usage Control.
Please clarify in detail.
Thanks in advance
Siva

I don't remember when the web Usage controls was introduced... I'm going to guess 7.0?
To upgrade your box to the the current version, click on System Administration>System Upgrade. Click on the Available Upgrades and see what's available for your hardware. If nothing is there, contact your reseller.
Review the release notes for the version you want to upgrade to. http://www.cisco.com/en/US/products/ps10164/prod_release_notes_list.html
Select the version you want, check the box to save the config, you can also have it email you the config. Make sure to uncheck the "Mask passwords..." so that if you have to reload this config on something, it works properly.
There are a huge number of changes in how web usage control works, and the visibility it gives you into what apps users are using and how those applications work. Far to many to go into here. Look at this document:
Chapter 18. http://www.cisco.com/en/US/docs/security/wsa/wsa7.5/user_guide/WSA_7.5.0_UserGuide.pdfhttp://www.cisco.com/en/US/docs/security/wsa/wsa7.1/user_guide/Cisco_IronPort_AsyncOS_7.1.0_User_Guide_for_Web_Security_Appliances.pdf

Similar Messages

How to recategorize URL's when using IronPort Web Usage Controls

The usual way of recategorizing URL's doesn't work when Cisco IronPort Web Usage Controls are enabled. There's no Word in the doc about how to recategorize URL's neither. We're running AsyncOS 7.7 on S170. Please advise.

Hi,
You can try this link (normally takes 24-48 hours).
https://securityhub.cisco.com/web/submited_urls
If it doesn't work I suggest you to open a TAC case.
Regards,
Luis Silva

IronPort Web usage controls

Please help me in this confusion. My Client wants a IronPort Web Usage Controls for his two devices below:
A4BADBE0F4F5-DNGYY4J
A4BADBE0FC06-97SYY4J
We as partners provided our client with the WBUN‐2A‐GV‐D‐1Y ‐ Dual S160‐Series Appliance, 1 Year IronPort WUC, 1 Year Platinum Support ‐ 250 users
The question is my client wants a qoute for the WEB USAGE CONTROLS. The local reseller in my country says the web usage control is already in the bundle we provided him ?
How do we get the web usage control software or is it already in the bundle ? If its not in the bundle How do we purchase it ?
Thanks

Hi Talal,
Please open a support case with the Cisco Tac Content Security Team. They can review your appliances for licensing and if needed email you your feature keys.
Sincerely,
Erik Kaiser
WSA CSE
WSA Cisco Forums Moderator

Using WS-Security with Web Service Controls in WLI 8.1 SP3

We have a process that calls a web service hosted on a .NET environment. The technique we have used is to generate a service control from the web service WSDL and call that control from a process. The web service is protected using a WS-Security usernameToken policy. The problem is that the .NET environment requires the wsse:Nonce and wsu:Created elements to be provided along with the token and I cannot see how I can specify this using a wsse policy file in WebLogic workshop. Does anyone have any advice for the best way to add this information to the security element in the SOAP header from within a WLI process? I've seen some example code for a java web service client, but that would not really fit with the control-based approach normally adopted in a WLI environment.

You won't be able to do this using the WSSE file.
An easy way to get around this is to use an XML Bean built from the WS-Security XML Schema. You'll have to read the WS-Security spec to determine how to create the nonce, but you'll be able to convert this XML Bean into the Element[] that the setOutputHeaders() method, which is on the service control you call the .NET Web Service with.
Regards,
Mike Wooten

Schedule web url filtering in isa550

Hello,
This is my first experience using isa550 security appliance. i would like to schedule the web url filters: in example accept or deny some websites or url categories on certains hours, or days.
i see that the schedules can be applied on firewall rules, but i can't see how to apply theses schedules on web url filtering. when i link the web url policy to zones i don't see anything about shedules .
can you help please ?

I can confirm what you are seeing. There are schedules on the Application Control, for example, but not the web filter. One possible consideration with this is though you may want to allow some websites during certain times (Facebook over lunch hours for example) there would probably be blocked websites you would want to allow ever (child porn for example) ever. Since only one policy can be applied per Zone, until multiple policies can be applied to a Zone, you probably wouldn't want to turn off ALL web filtering for a Zone ever.
I'd recommend trying to leverage Application Control instead. You can apply multiple policies to a Zone so you could create a policy that includes everything that is blocked always and another that has content you'll allow during a schedule. The apply both policies to the same Zone and ensure your schedule policy is above your always block policy so that if there's ever a conflict the schedule policy would apply first and allow the traffic during allowed times. That's unless your internal security policies dictate otherwise.
Sent from Cisco Technical Support iPhone App

Web Filtering / URL Filtering

Dear All,
I am looking forward to buy the cisco ASA Firewall with the below mentioned part number.
ASA5525-SSD120-K9 kindly please let me know whether it supports WEB Filtering / URL Filtering.
or do i need to go for any other model or license.
Awaiting your quick responses as it is very urgent.
Responses are highly appreciated..

That's the hardware
You also need a software subscription for the URL/web stuff/IPS
Near the bottom of this page: http://www.cisco.com/c/en/us/products/collateral/security/asa-5500-series-next-generation-firewalls/data_sheet_c78-701659.html
there is a chart with the options and part numbers.

Monitoring Oracle Glassfish or Generic URL with Oracle Grid Control

How are people monitoring Oracle Glassfish with Oracle Grid Control?
I really just need to monitor the URL right now, is the only method to setup a system and monitor a generic web test with a beacon?

I would think this is indeed the only way to monitor the URL.
Perhaps you could try a solution in creating your own plug-in.
Check http://www.oracle.com/technetwork/oem/extensions/index.html for this.
Regards
Rob
http://oemgc.wordpress.com

How can I create a query with web service data control?

I need to create a query with web service data control, in WSDL, it's query operation, there is a parameter message with the possible query criteria and a return message contains the results. I googled, but cannot find anything on the query with web service. I cannot find a "Named Criteria" in web service data control like normal data control. In Shay's blog, I saw the topics on update with web service data control. How can I create a query with web service data control? Thanks.

Hi,
This might help
*054. Search form using ADF WS Data Control and Complex input types*
http://www.oracle.com/technetwork/developer-tools/adf/learnmore/index-101235.html

VPN remote site tunnel-all with web and email filtering at core

I'm helping a client setup a 'tunnel-all' VPN from remotes to the core. That's not difficult - there's enough commentary in the community and I can set it up in the lab. The rub comes with the location of the web filter box in particular - it's currently in-line with the inside interface of the ASA.
What does the topology for a typical tunnel-all VPN with web filtering at the core look like? Can't put my hands on any quickly.
We only have one ISP conn at this time. I have a layer-3 switch at the core too.
Thx

Hi,
Thats a good question.
I haven't thought about this part of VPN filtering much as I've usually had to open only a few ports. But if you really need to open all traffic from local to remote, you will also be doing the same for the other direction in the same ACL ACE rule.
The only thing I can come up with right now is to stop using VPN Filter list and change the "sysopt" setting so that ASA wont let VPN traffic past the outside interface without checing the outside interface ACL
The Configuration command (8.2) is the following:
sysopt connection permit-vpn
For traffic that enters the adaptive security appliance through a VPN tunnel and is then decrypted, use the sysopt connection permit-vpn command in global configuration mode to allow the traffic to bypass interface access lists. Group policy and per-user authorization access lists still apply to the traffic. To disable this feature, use the no form of this command. sysopt connection permit-vpn no sysopt connection permit-vpn
Though if you change this setting, you will have to take this into account with every VPN Client or L2L VPN you have configured so far.
After this you can create rules on your outside interface access-list to limit remote user access to your local network. From local to remote networks you can use the access-lists assigned to each interface in question.
Hope this helps
- Jouni

Issue with filtering values in Web Template

I am facing a problem with filtering values in Web Template.
I have two queries based on two different data providers. One query is getting data from an Info set and the other from a Remote Cube. I have a single navigational block to filter values for both these queries but the change gets reflected only on the variable of one query. The other reflects no change and shows all the values irrespective of the filter condition.
I have tried the option of setting in the properties of the navigational block, affected data providers as both your data providers.But no effect.
Can a single navigational block be used to filter values on 2 queries which are built on different data providers? If yes, can someone please tell me how it is possible?
Kindly let me know how can I make the changes appear in both the queries?I am using SAP BI 3.5.
Thanks & Regards,
Suchitra

Hi Peng,
Frank also published a fix for 11g R1: http://www.oracle.com/technology/products/jdev/tips/fnimphius/rc_expand_menu_on_mouse_over.html
function showMenu(event){
var adfRichMenu = event.getSource();
adfRichMenu.getPeer().show(null,true);
}This should work.
Luc Bors

Report Viewer icon rendering issue with web controls

Hi,
I have a sample application in ASP.NET 2.0 in which if I have a report viewer control in an aspx page and when I try to browse the page the report renders properly with all icons image also. But in the same application I am having a web user control that is having the report viewer control and I have added this control on another page. Now if I try to browse this page the report is rendered properly but the icon images are not displayed rather as 'X' is displayed indicating images are missing.
Thanks
Kajal

It sounds like the CrystalReportViewer control does not "agree" with the .NET control you are embedding it in. Can you be more specific with the exact steps to duplicate this issue? It would be helpful to know what controls you are using.
Viewing the source code will be helpful in your troubleshooting. You'll also want to review your IIS logs to see what error are popping up there. It could be that the gifs are being searched for in another location. You may need to make a copy of the crystalreportviewerxx directory in a new location.
Regards,
David

Wsa S160 accept usage control and web reputation filter update failure??

end-user noticed there are some failure on the accept usage control and web reputation filter update. it show update /download failure on nov 11 and nov 14. I do check the update log it shows Mon Nov 14 14:45:11 2011 Info: Starting scheduled update Mon Nov 14 14:45:12 2011 Info: Scheduled next update to occur at Mon Nov 14 14:50:12 2011 Mon Nov 14 14:45:59 2011 Info: wbrs released download lock Mon Nov 14 14:45:59 2011 Warning: wbrs update failed but the new update shows "not available" . is this a eror or it is normal ?
IF there is not new release for update, if I click update, will it report a update failure? or what else I can check?
i checked the update log.
Mon Nov 14 14:45:11 2011 Info: Starting scheduled update
Mon Nov 14 14:45:12 2011 Info: Scheduled next update to occur at Mon Nov 14 14:50:12 2011
Mon Nov 14 14:45:59 2011 Info: wbrs released download lock
Mon Nov 14 14:45:59 2011 Warning: wbrs update failed
Mon Nov 14 14:50:12 2011 Info: Starting scheduled update
Mon Nov 14 14:50:18 2011 Info: Acquired server manifest, starting update 4966
Mon Nov 14 14:50:18 2011 Info: Server manifest specified an update for merlin
Mon Nov 14 14:50:18 2011 Info: merlin was signalled to start a new update
Mon Nov 14 14:50:18 2011 Info: merlin processing files from the server manifest
Mon Nov 14 14:50:18 2011 Info: merlin started downloading files
Mon Nov 14 14:50:18 2011 Info: merlin beginning download of remote file "http://updates.ironport.com/merlin/masters-2.1/1453"
Mon Nov 14 14:50:18 2011 Info: merlin waiting on download lock
Mon Nov 14 14:50:18 2011 Info: merlin acquired download lock
Mon Nov 14 14:50:18 2011 Info: Scheduled next update to occur at Mon Nov 14 14:55:18 2011
Mon Nov 14 14:50:27 2011 Info: merlin released download lock
Mon Nov 14 14:50:27 2011 Info: merlin successfully downloaded file "http://updates.ironport.com/merlin/masters-2.1/1453"
Mon Nov 14 14:50:27 2011 Info: merlin started applying files
Mon Nov 14 14:50:27 2011 Info: merlin applying file "merlin/masters-2.1/1453"
Mon Nov 14 14:50:27 2011 Info: merlin restarting merlin
Mon Nov 14 14:50:27 2011 Info: merlin verifying applied files
Mon Nov 14 14:50:27 2011 Info: merlin updating the client manifest
Mon Nov 14 14:50:27 2011 Info: merlin update completed
Mon Nov 14 14:50:27 2011 Info: merlin waiting for new updates
Mon Nov 14 14:50:59 2011 Info: wbrs started downloading files
Mon Nov 14 14:50:59 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321069006.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:50:59 2011 Info: wbrs acquired download lock
Mon Nov 14 14:50:59 2011 Info: wbrs released download lock
Mon Nov 14 14:50:59 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321069006.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321069341.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:50:59 2011 Info: wbrs acquired download lock
Mon Nov 14 14:50:59 2011 Info: wbrs released download lock
Mon Nov 14 14:50:59 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321069341.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321070032.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:50:59 2011 Info: wbrs acquired download lock
Mon Nov 14 14:50:59 2011 Info: wbrs released download lock
Mon Nov 14 14:50:59 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321070032.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321070355.inc"
Mon Nov 14 14:50:59 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:50:59 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321070355.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321071157.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321071157.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321071469.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321071469.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321071901.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321071901.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321072452.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321072452.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321072766.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321072766.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321073089.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:00 2011 Info: wbrs released download lock
Mon Nov 14 14:51:00 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321073089.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321073407.inc"
Mon Nov 14 14:51:00 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:00 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:01 2011 Info: wbrs released download lock
Mon Nov 14 14:51:01 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321073407.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321074165.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:01 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:01 2011 Info: wbrs released download lock
Mon Nov 14 14:51:01 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321074165.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321075094.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:01 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:01 2011 Info: wbrs released download lock
Mon Nov 14 14:51:01 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321075094.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321075449.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:01 2011 Info: wbrs acquired download lock
Mon Nov 14 14:51:01 2011 Info: wbrs released download lock
Mon Nov 14 14:51:01 2011 Info: wbrs successfully downloaded file "http://updates.ironport.com/wbrs/ip/1321075449.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs beginning download of remote file "http://updates.ironport.com/wbrs/ip/1321075769.inc"
Mon Nov 14 14:51:01 2011 Info: wbrs waiting on download lock
Mon Nov 14 14:51:01 2011 Info: wbrs acquired download lock

I think this happens occasionally, its not a big deal.
Your box tried again, and eventually got update 5 min later.
You may want to extend the time on this a bit to help performance... every 5 min does add some load.
Support had me set mine at 8 hours...

Error on Form with a WebBrowser control: A script on this page causing your web browser to run slowly.

Hi,
I have a form with a WebBrowser control. When I load a page, I am getting the following error popup:
Stop running this script?
A script on this page is causing your web browser to run slowly.
If it continues to run, your computer might become unresponsive.
How to suppress the above error? I tried using WebBrowser.ScriptErrorsSuppressed by setting it to true. But it didn't work for me.
Thanks in advance.
Thanks Prasad

Hi,
I have a form with a WebBrowser control. When I load a page, I am getting the following error popup:
Stop running this script?
A script on this page is causing your web browser to run slowly.
If it continues to run, your computer might become unresponsive.
How to suppress the above error? I tried using WebBrowser.ScriptErrorsSuppressed by setting it to true. But it didn't work for me.
Thanks in advance.
Thanks Prasad
Hello,
In addition, would you mind sharing us the version of your IE and the detailed html code of that page?
Regards,
Carl
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Problem with building web service control

Hi i am using a web service control for invoking a web service. the application builds correctly from workshop and i am able to talk to web service. However, when i exported the ant build file from workshop and tried to build the application from prompt using ant, it gives me follwoing wrror -
[wlwBuild] [Build] Errors found in D:\crmwork\weboss\esb\ESBPrj\com\covad\esb\controls\BillingServiceSBControl.jcx:
[wlwBuild] [Build] Error at line 9 column 18:
[wlwBuild] [Build] Description: 'com.bea.wlw.runtime.jws.compiler.ServiceCtrlChecker$JcxValidateControl' could not be created.
[wlwBuild] [Build] Prescription: The class could not be created. Verify that it has a no-argument constructor.
[wlwBuild] [Build] Error at line 9 column 18:
Has anybody encountered this error? What could be the problem cause the workshop build works fine.

I solved the problem :-)
it happened due to JAVA_HOME env var. It has to point to jdk that comes along with wl812. mine was pointing to sun jdk 1.4.2. However, this is a bug, because, for wlwlbuild task , i was setting the proper bea java home, still it was failing due to system java_home var. And i did not face this problem with WL813. After facing lot of issues with 812, now i feel, 812 is not a stable production version.
Anyways, now the prob;em is solved.

Web Filtering content with a potential proxy program

If your going for an appliance on your system start off with something like Untangle or Smoothwall Express to get your feet wet. Both are free but have paid options if your like one. Get a little experience under your belt to know what your looking for and have the right questions in mind if you go looking for a paid option.

Hi Guys,We use OPENDNS at the moment to report back to us about our clients web usage, we have a standing order for one client to have no porn, however, someone is consistently browsing porn. when we blocked these websites, the traffic of this type went away, i recently checked and now i can see the this user is back to his old ways. He has been notified not to do this on the machines. i also see a history of a flash drive being plugged in. How can i be sure of what he is doing? i setup a rule that blocks the machines from allowing usb devices to be plugged in since i suspect he is using tor or some other 3rd party anonymous browser. i doubt this user is spending 3-6 hours browsing blocked browser pages, but i feel as if it is being picked up but still passing through even though the report shows it is blocked.TL:DR-blocked porn for...
This topic first appeared in the Spiceworks Community

URL filtering replacing with web usage control

Similar Messages

Maybe you are looking for