Parser for Cisco WSA (Web Security Appliance) Issues
We recently deployed a number of these devices in our enterprise, and set up corresponding receivers in Nitro using the profile for the device. We're finding that a number of the ASP rules are not being parsed, specifically the HTTP POST and GET events.
Looking at the regexs' it appears that almost none of the data coming from the device is being parsed, hence, we get nothing displayed.
I am curious as to if any other users are having similar issues, and if so, how you resolved them. I'm not keen about having to rewrite a parser.