Hi,
I was checking this demo, the last video on the WSA introduction. There are
basically two policies created, one for Vlan100 and another one for Vlan60.
The VLAN100 is able to download the malware.exe file correctly because he is
only monitoring it.
Since The global policy was being inherit, and the per group policy was not
configured the first time, the User was not able to downloaded
based on the malware policy on the globla policy.
Once the Policy was modified, the User was able to download the file and it was
only being Monitored.
For the Vlan60 The user should have been blocked as per the task
The first thing that is shown is the User being able to download the file
correctly but the download is stopped (manually)
Then the policy for .exe is changed and the User is immediately blocked to
download the file
My question is, shouldnt the first download of the VLAN 60 user be blocked
based on the inherit policy for malware as it did on the first attempt on
Vlan100?
Mike.
_______________________________________________
For more information regarding industry leading CCIE Lab training, please visit
www.ipexpert.com
Are you a CCNP or CCIE and looking for a job? Check out
www.PlatinumPlacement.com
