Virtual Secure Web Gateway

Dear Team ,

I am having SWG implemented in my infrastructure and it is in inline mode we have isa also which is used as proxy and swg for filtering . Past few days we are having the problem end users used to download large number of files and swg couldnt able to identify the users login credential and it any systems are infected it shows the host property of ISA server .

please advice

Team ,

Is there any KT which can be used for Daily operations and which can guide for creating different reports and how as per the requirement

Team ,

Please respond

have any information from the Symantec gateway of which signature is the Botnet traffic is being detected 

how to check the Traffic logs related to Symantec device please advice

 

Hello,

I'd need more information to understand what your problem is:

- is your ISA placed upstream or downstream of SWG? ISA server should be placed upstream, otherwise SWG will see all the internal traffic coming from the ISA server IP address.

- Did you add ISA into the Administration > Configuration > Server page as "proxy"?

- Did you enable the option " Analyze ports used by proxy" under Administration > Configuration > Proxy?

-Can you eventually provide more details about your deployment?

Also, this technote is worth reading as a checklist for new deployments:

Symantec Web Gateway (SWG) - Best Practices: New Deployments

http://www.symantec.com/docs/TECH144596

Thanks,

Federico