Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Bypassing IronPort via Online Proxy

Has anyone else heard of this? My boss found an article and I've been experimenting with mixed results. Some pages blocked by WBRS are still blocked while others open to the main page.

Some sites that we use a warn screen on for our endusers bypass the warning and go directly to the desired page however links from that page have to be entered again with the custom link to go there.

Basically this is bypassing when the enduser has to acknowledge a warning to go to those sites "categories" we set that way...

Here is a url to the article that talks about it:


I can't really find a predefined category that would cover this. It shows up as a "Search Engines and Portals" category.

It kind of bothers me that if this is truly a problem then there are more than likely multiples of these out there...

You could create custom categories and block them all if one knew all the urls but that would probably be a bit of a pita....

Basically the gist of the article is thus:

"you just go to:

and replace with the site you want to access, and it seems to work."

Waiting to see if anyone's heard of this....




Bypassing IronPort via Online Proxy


You don't mention what version you're using so I'm going to assume you're on 7.5 or higher...

In your Access Policy, look in Application Visibility and Control.

There is a Proxy Category with a list of proxies you can block/monitor/whatever.


New Member

Bypassing IronPort via Online Proxy


We have the Proxy Category blocked as well as the category, and I can still get through to unauthorized sites.

Bypassing IronPort via Online Proxy

What sites, you may need to submit them for classification.



New Member

Bypassing IronPort via Online Proxy


It looks like they have already blocked the ones mentioned in the article.

Mike C