Re: [c-nsp] Cisco ScanSafe, aka Cisco Cloud Web Security

2013-12-06 Thread Scott Voll
you have a couple options. option one, you can use the browser proxy via GPO or what ever, but this limit's you to a single Tower (it's still a cluster setup, but if that DC goes down, your still up a creek). option two is that you install the Cisco Anyconnect Client (Web security part, there is

Re: [c-nsp] Cisco ScanSafe, aka Cisco Cloud Web Security

2013-12-06 Thread Eugeniu Patrascu
Aha, so the client determines that "hey, you need to authenticate to this portal first" and then is business as usual. This makes complete sense. >From the discussion I was under the impression that there is no client installed on the machine and you push browser proxy settings through GPO and tha

Re: [c-nsp] Cisco ScanSafe, aka Cisco Cloud Web Security

2013-12-06 Thread Scott Voll
Accept the terms of the captive portal, then all your connections go to CCWS after that. The anyconnect client is smart enough to not push the traffic until it has a internet connection. I guess unless you put it into a closed state. we have it open so that when they are out of the office they c

Re: [c-nsp] Cisco ScanSafe, aka Cisco Cloud Web Security

2013-12-06 Thread Eugeniu Patrascu
Helllo Pui, Thanks for the pointers but I think you misunderstood my question. I know how to set up a captive portal for WiFi access. What I wanted to know is how are users logging into captive portals when the browser has a proxy set and it tries to send all requests to the proxy server which un

Re: [c-nsp] Cisco ScanSafe, aka Cisco Cloud Web Security

2013-12-05 Thread Eugeniu Patrascu
Hi, How do you handle captive portals in hotels and other venues where you first have to login into the portal and then have Internet access ? This is my biggest woe right now in this regards with any kind of proxy settings I can push to users. Thanks, Eugeniu On Thu, Dec 5, 2013 at 10:05 PM,

Re: [c-nsp] Cisco ScanSafe, aka Cisco Cloud Web Security

2013-12-05 Thread Scott Voll
We currently use CCWS (previously ScanSafe) with the Anyconnect client. Nice solution. Whether your in the office or remoting from a Starbucks, the traffic is always proxied. We went with the solution because of a couple reasons: 1. with multiple egress points on the corporate network, we didn'

Re: [c-nsp] Cisco ScanSafe, aka Cisco Cloud Web Security

2013-12-04 Thread Justin M. Streiner
First of all, why are you allowing or disallowing split tunnel networks ? There is always the risk that he/she may get infected with some malware that your antivirus does not recognize and it spreads through the internet network when the user VPNs to the corporate network. From what I've seen,

Re: [c-nsp] Cisco ScanSafe, aka Cisco Cloud Web Security

2013-12-04 Thread John Kougoulos
On Wed, Dec 4, 2013 at 6:18 PM, Eugeniu Patrascu wrote: > On Wed, Dec 4, 2013 at 5:53 PM, Herro91 wrote: > > > Has anyone on the lists explored Cisco's ScanSafe SaaS offering, now > called > > Cisco Cloud Web Security - as a means of providing protection in the > cloud > > that would potentially

Re: [c-nsp] Cisco ScanSafe, aka Cisco Cloud Web Security

2013-12-04 Thread Eugeniu Patrascu
On Wed, Dec 4, 2013 at 5:53 PM, Herro91 wrote: > Hi, > > I'm doing some research on the Cisco Cloud Web Security offering, also > known as ScanSafe. > > Has anyone on the lists explored Cisco's ScanSafe SaaS offering, now called > Cisco Cloud Web Security - as a means of providing protection in t

[c-nsp] Cisco ScanSafe, aka Cisco Cloud Web Security

2013-12-04 Thread Herro91
Hi, I'm doing some research on the Cisco Cloud Web Security offering, also known as ScanSafe. Has anyone on the lists explored Cisco's ScanSafe SaaS offering, now called Cisco Cloud Web Security - as a means of providing protection in the cloud that would potentially negate the requirement to hav