Cisco Cisco Web Security Appliance S670 Betriebsanweisung

Seite von 432
 
A-8
Cisco AsyncOS for Web User Guide
 
Appendix A      Troubleshooting
  Policy Problems
If some Access and Routing Policy group memberships are defined by HTTPS and if some Access 
Policies block HTTPS, then when you enable the HTTPS Proxy, those Access and Routing Policy groups 
become disabled. You can choose to enable the policies at any time, but all HTTPS related configurations 
are removed. 
Blocked Object Problems
Some Microsoft Office Files Not Blocked
When you block Microsoft Office files in the Block Object Type section, it is possible that some 
Microsoft Office files will not be blocked. 
If you need to block all Microsoft Office files, add 
application/x-ole
 in the Block Custom MIME 
Types field. However, blocking this custom MIME type also blocks all Microsoft Compound Object 
format types, such as Visio files and some third party applications. 
Blocking DOS Executable Object Types Blocks Updates for Windows OneCare
When you configure the Web Security appliance to block DOS executable object types, the appliance 
also blocks updates for Windows OneCare. 
Identity Disappeared from Policy
Deleting aAppendix A, `Identity Disappeared from Policy,' on page 8n authentication realm disables 
associated identities. Disabling an identity removes it from associated policies. Verify that the identity 
is enabled and then add it to the policy again.
Policy Match Failures
Policy is Never Applied
If multiple Identities have identical criteria, AsyncOS assigns the transactions to the first identity that 
matches. Therefore, transactions never match the additional, identical identities. Any policies that apply 
to those subsequent, identical identities are never matched or applied.