fferaboli

Profile

fferaboli

Symantec Employee

Member for: 3 years 11 weeks

Job Title: Technical Consultant

Member for: 3 years 11 weeks

Blog: View recent blog entries

Contribution Stats

Solutions

Forum Threads

223

Comments

Blog Entries

Idea

Articles

Videos

Downloads

Events

Groups Joined

fferaboli's Activity

Show:

discussion comment 14 Feb 2012

fferaboli commented on: Detailed URL Reports

Hi, The following SWG feature can help: SWG consolidates the reports by default after 0 days so, different entries from the same computer to the same domain name will be displayed as a single report entry. The administrator can postpone this ...

discussion comment 09 Feb 2012

fferaboli commented on: Some quries regarding SWG proxy caching

Hi, Some answers: 1- Maximum cache object size for the proxy is 256kb . Is this the setting you are asking about? 2- Into SWG will depend on how much data you generate and how much space you have available on the box. By default will preserve ...

discussion comment 02 Feb 2012

fferaboli commented on: Symantec Web Gateway - Virtual?

Hi, yes, there is and you can get it here: http://www.symantec.com/theme.jsp?themeid=web-gateway-try-and-buy Regards, Federico

discussion comment 25 Jan 2012

fferaboli commented on: Detect Dropbox and evernote usage

Hi, Just some ideas: you can certainly see machines hitting dropbox URLs from the custom reports. Make sure relevant columns are enabled. Just filter by distant URL and use "contains" "dropbox". You will see number of hits ...

discussion comment 25 Jan 2012

fferaboli commented on: Web Gateway Kerberos Question

Hi, if the question is regarding the Authentication Method drop-down box available under Administration -> Configuration -> Authentication, Kerberos will work with either DCInterface or NTLM. Check "Configuring Active Directory ...

discussion comment 24 Jan 2012

fferaboli commented on: SMG 9.5.3-3 Bounce attack prevention - VMware app.

Hi, is pretty much as described here: http://en.wikipedia.org/wiki/Bounce_Address_Tag_Validation "mailbox@example.com with prvs=tag-value=mailbox@example.com, where prvs, called "Simple Private ...

discussion comment 24 Jan 2012

fferaboli commented on: SMG 9.5.3-3 Bounce attack prevention - VMware app.

Hi, the feature rewrites the outbound mail from (envelope) address. Is that the information you are looking for? Regards, Federico

discussion comment 12 Jan 2012

fferaboli commented on: Symantec Web Gateway Virtual Edition

Yes, correct. Federico

discussion comment 12 Jan 2012

fferaboli commented on: Symantec Web Gateway Virtual Edition

Hi, if you want to use an external proxy then SWG should be set in Inline Mode (not Inline + Proxy) and you must configure your external proxy under "Servers" and set the SWG to analyze that traffic. Just bear in mind there are some ...

discussion comment 03 Jan 2012

fferaboli commented on: symantec web gate way virtual edition default password

Hi, not sure what you mean by accessible but you can start by checking the actual IP address of SWG from the console above and then make sure the routing logic is correct from the SWG and client sides. You can use traceroute and ...

discussion comment 03 Jan 2012

fferaboli commented on: Connecting Symantec Web Gateway to Network...

Hi, from what you mentioned is going to be SWG in Inline mode with an External Proxy. In that case, SWG will be downstream of the actual proxy and does not require any changes to the browser settings if the proxy maintains its settings ...

discussion comment 22 Dec 2011

fferaboli commented on: Connecting Symantec Web Gateway to Network...

Hi, you can place SWG in inline mode downstream of the proxy and it should be able to check for malware via HTTP, but because of not taking advantage of the proxy some features won't be possible, like scanning for threats on HTTPS; ...

discussion comment 22 Dec 2011

fferaboli commented on: Connecting Symantec Web Gateway to Network...

Hi, Please bear in mind there are not many details regarding your network environment here. You should replace the current proxies with the proxy provided by SWG. In order to get most of the features I'd consider deploying the product in ...

discussion comment 22 Dec 2011

fferaboli commented on: Symantec Web Gateway 5.0.2 virtual "inline mode"

Hi, chapter 4 of the SWG getting started guide should cover your needs. http://www.symantec.com/business/support/index?page=content&id=DOC4247&key=58161&actp=LIST HTH, Federico

discussion comment 12 Dec 2011

fferaboli commented on: Symantec web gateway

Hello, I'd need more information to understand what your problem is: - is your ISA placed upstream or downstream of SWG? ISA server should be placed upstream, otherwise SWG will see all the internal traffic coming from the ISA server IP ...

discussion comment 01 Dec 2011

fferaboli commented on: Can SWG be configured to ignore internal traffic

Hi, I guess that in tap mode SWG is going to see as much as the tap port will forward to SWG. If the ports of the switch are "seeing" internal traffic, a copy of each of those packets will be replicated into the tap so from the SWG ...

discussion comment 17 Nov 2011

fferaboli commented on: Inline + proxy mode and blocking https

Hi, - the browsers must use the SWG LAN/WAN inline IP address as the proxy address. - the external firewall must allow traffic from that IP address. The browsers will connect to the proxy IP address and the proxy will re-generate new ...

discussion comment 16 Nov 2011

fferaboli commented on: required information for Create case for SWG

Hi, I'm confident you will get perfect support regardless of the platform indicated. You can use Fedora 13 for the Platform Version. Thanks, Federico

discussion comment 16 Nov 2011

fferaboli commented on: required information for Create case for SWG

Hi, The Product version is probably the only that would be useful. Current version is 5.0.2, but could be 5.0.1 or older. This displays on the SWG GUI under Administration > Updates -> Web Gateway Software Updates -> Current Sofware ...

discussion comment 16 Nov 2011

fferaboli commented on: Inline + proxy mode and blocking https

Hi, Some answers here 1) In order to block HTTPS traffic you need the proxy, so proxy only OR inline + proxy modes are OK. Is the proxy feature that will allow SWG to block HTTPS. 2) Any configuration that involves the proxy, so proxy only OR ...

fferaboli

fferaboli's Activity

Technical Support

Symantec.com

Store

Community Stats