Verify Connections

After configuring access to the Symantec Web Security Service, verify that the service is receiving and processing content requests.

Note: This is a generic section that demonstrates connection by multiple access methods. Also see Verify Mobile Connections.

Verify Client Protection

From a client system that has web access (or the specific test client if so configured), browse to the following site:

test.threatpulse.com

The test is successful if you see the following webpage.

Fixed Locations

Click the Service link (upper-right corner).
Select Network > Locations.

Various icons represent the connection status.

Icon	Connection Status Description
	The Web Security Service recognizes the location and accepts web traffic.
	A location has been configured, but the Web Security Service cannot connect. Verify that the web gateway device is properly configured to route traffic.
	A previously successful web gateway to Web Security Service configuration is currently not connected. Firewall/VPN Verify your firewall’s public gateway address. Verify the Preshared Key (PSK) in the portal matches that of your firewall configuration. Verify that the server authentication mode is set to PSK. Explicit Proxy Verify the PAC file installation and deployment. Verify that your network allows outbound requests on port 8080. Do not attempt to use Explicit Proxy in conjunction with the WSS Agent as the client will detect that a proxy is in effect, assume a man-in-the-middle attack, and fail (open or closed depending on the settings). Proxy Forwarding—Verify the gateway address in the forwarding host is correct. Remote Users—Verify the WSS Agent installation. See the section below for more information.

Icon

Connection Status Description

The Web Security Service recognizes the location and accepts web traffic.

A location has been configured, but the Web Security Service cannot connect. Verify that the web gateway device is properly configured to route traffic.

A previously successful web gateway to Web Security Service configuration is currently not connected.

Firewall/VPN
- Verify your firewall’s public gateway address.
- Verify the Preshared Key (PSK) in the portal matches that of your firewall configuration.
- Verify that the server authentication mode is set to PSK.
Explicit Proxy
- Verify the PAC file installation and deployment.
- Verify that your network allows outbound requests on port 8080.
- Do not attempt to use Explicit Proxy in conjunction with the WSS Agent as the client will detect that a proxy is in effect, assume a man-in-the-middle attack, and fail (open or closed depending on the settings).
Proxy Forwarding—Verify the gateway address in the forwarding host is correct.
Remote Users—Verify the WSS Agent installation. See the section below for more information.

Remote Users

In Service Mode; select Mobility > Agent Status.

To further verify that the agent in running on remote clients and communicating with the WSS.

For WSS Agent, see About the WSS Agent UI.
For Unified Agent, click (or double-click) the application icon in the menu bar and click Status.

Windows (UA)

If the system detects a corporate network that provides web access and security, the Unified Agent enters into passive mode.

Mac (UA)

If the system detects a corporate network that provides web access and security, the Unified Agent enters into passive mode.