Cisco Cisco Web Security Appliance S390 사용자 가이드

다운로드
페이지 446
 
A-4
AsyncOS 8.5 for Cisco Web Security Appliances User Guide
 
Appendix A      Troubleshooting
  Feature Keys Expired
Feature Keys Expired
If the feature key for the feature you are trying to access (via the web interface) has expired, please 
contact your Cisco representative or support organization.
Failover Problems
Misconfiguration of failover groups might result in multiple master appliances or other failover 
problems. Diagnose failover problems using the testfailovergroup subcommand of the CLI 
failoverconfig command.
For example:
wsa.wga> failoverconfig
Currently configured failover profiles:
1.      Failover Group ID: 61
        Hostname: failoverV4P1.wga, Virtual IP: 10.4.28.93/28
        Priority: 100, Interval: 3 seconds
        Status: MASTER
Choose the operation you want to perform:
- NEW - Create new failover group.
- EDIT - Modify a failover group.
- DELETE - Remove a failover group.
- PREEMPTIVE - Configure whether failover is preemptive.
- TESTFAILOVERGROUP - Test configured failover profile(s)
[]> testfailovergroup
Failover group ID to test (-1 for all groups):
[]> 61
FTP Problems
Also see: 
URL Categories Do Not Block Some FTP Sites
When a native FTP request is transparently redirected to the FTP Proxy, it contains no hostname 
information for the FTP server, only its IP address. Because of this, some predefined URL categories 
and Web Reputation Filters that have only hostname information will not match native FTP requests, 
even if the requests are destined for those servers. If you wish to block access to these sites, you must 
create custom URL categories for them using their IP addresses.