Cisco Cisco Web Security Appliance S360 Guia Do Utilizador

Página de 286
A-4
AsyncOS 9.2 for Cisco Web Security Appliances User Guide
 
Appendix A      Troubleshooting
  FTP Problems
For example:
wsa.wga> failoverconfig
Currently configured failover profiles:
1.      Failover Group ID: 61
        Hostname: failoverV4P1.wga, Virtual IP: 10.4.28.93/28
        Priority: 100, Interval: 3 seconds
        Status: MASTER
Choose the operation you want to perform:
- NEW - Create new failover group.
- EDIT - Modify a failover group.
- DELETE - Remove a failover group.
- PREEMPTIVE - Configure whether failover is preemptive.
- TESTFAILOVERGROUP - Test configured failover profile(s)
[]> testfailovergroup
Failover group ID to test (-1 for all groups):
[]> 61
Failover Issues on Virtual Appliances 
For deployments on virtual appliances, ensure that you have configured the interface/ virtual switch on 
the hypervisor to use promiscuous mode. 
FTP Problems
Also see: 
URL Categories Do Not Block Some FTP Sites
When a native FTP request is transparently redirected to the FTP Proxy, it contains no hostname 
information for the FTP server, only its IP address. Because of this, some predefined URL categories 
and Web Reputation Filters that have only hostname information will not match native FTP requests, 
even if the requests are destined for those servers. If you wish to block access to these sites, you must 
create custom URL categories for them using their IP addresses.
Large FTP Transfers Disconnect
If the connection between the FTP Proxy and the FTP server is slow, uploading a large file may take a long 
time, particularly when Cisco Data Security Filters are enabled. This can cause the FTP client to time out 
before the FTP Proxy uploads the entire file and you may get a failed transaction notice. The transaction 
does not fail, however, but continues in the background and will be completed by the FTP Proxy.