Good day everyone 🙂   Like many organizations, we have several workers at home using teleworker gateways.  We have the content filtering set up on the head-end appliance, so that's working as expected.  However, when users are normally in the office their traffic goes through an Ironport WSA for reporting further up the chain.  Is there an easy way to send web traffic to this WSA from the head-end appliance?  My searches have found that the security appliances don't support WCCP but I was wondering if there's an easy way to accomplish what I'm after. ... View more

I have both an "Employee" and "Guest" SSID in all our branches.  The "Employee" SSID does RADIUS auth for access, whereas the Guest SSID just redirects to a splash page.  Management would like to prohibit all corporate-owned laptops and mobile phones from joining the Guest network.  In the dashboard, I can just set per-SSID policies and deny access to the Guest, but I can't seem to find a way to do that in the API.  I'm trying to write a script that will grab the wireless MACs from our inventory and MDM system and push them into all the wireless networks out there. ... View more

I've discovered what I think is a bug, but I want to see if anyone else has made this work.  I do have a support case open.   I've found that if I enable WPA2 RADIUS authentication on an SSID that is tunneled to a MX64W security appliance, that the Access Point doesn't actually send any RADIUS packets on authentication.  In fact I sniffed the traffic at my NPS server, and I don't see *any* port 1812 traffic, from either the security appliance or AP.  Has anyone else seen this?   I will say that the VLAN that the traffic is concentrated on in the security appliance is a VLAN that doesn't exist anywhere else on the network, it's just in the appliance for L3 roaming.  Internet access works perfectly through the security appliance if I don't try to use RADIUS auth. ... View more