Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
New Member

Allow URLs with ports on it like https://x.x.x.x:7200/install.html

Hi Everybody,

I have an Ironport S670 and I want to allow URLs with port numbers on it like : https://x.x.x.x:7200/install.html

I would really appreciate if somebody could tell me a way to allow this kind of URLs.

Thanks a lot!

Best wishes,

Jordi

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Allow URLs with ports on it like https://x.x.x.x:7200/install.ht

Hi Jordi,

Assuming that firewall allows the WSA to go to connect to port 7200 and you have deployed the proxy in explicit mode. If you would like to allow WSA to by-pass the traffic to https://x.x.x.x:7200/, you could add port 7200 to the Protocols and User Agents settings in the access policy in the HTTP CONNECT Ports field. By doing this, the WSA will set the tunnel for the traffic to go to the destination on port 7200.

If you wish to decrypt the traffic there are few more things to do in the HTTPS Proxy and Decryption Policy configuration.

Regards,

Donny

2 REPLIES
Cisco Employee

Allow URLs with ports on it like https://x.x.x.x:7200/install.ht

Hi Jordi,

Assuming that firewall allows the WSA to go to connect to port 7200 and you have deployed the proxy in explicit mode. If you would like to allow WSA to by-pass the traffic to https://x.x.x.x:7200/, you could add port 7200 to the Protocols and User Agents settings in the access policy in the HTTP CONNECT Ports field. By doing this, the WSA will set the tunnel for the traffic to go to the destination on port 7200.

If you wish to decrypt the traffic there are few more things to do in the HTTPS Proxy and Decryption Policy configuration.

Regards,

Donny

New Member

Allow URLs with ports on it like https://x.x.x.x:7200/install.ht

Hi Donny,

thank you very much for your answer!

It worked perfect

thanks!

Cheers

Jordi

718
Views
0
Helpful
2
Replies
CreatePlease to create content