Configuring WCCP for http and https

cecato_ironport — Fri, 22 Feb 2008 23:20:41 GMT

How do I configure wccp on a 6509 to redirect http and https trafic to a S650. I am using the following config and http is working fine:

ip wccp version 2
ip wccp web-cache redirect-list aclwccp

interface Vlan23
description Rede Firewall
ip address 10.0.23.20 255.255.255.0
ip access-group 172 out
ip wccp web-cache redirect out
mls rp vtp-domain coc_block1
mls rp ip
mls netflow sampling
end

Should I config an other service for the https protocol?

Re: Configuring WCCP for http and https

jowolfer — Mon, 25 Feb 2008 23:43:19 GMT

Cecato,

The WSA can be configured to send 80 and 443 traffic, in the WCCP settings area (5.2.0+). There are some things you will need to be aware of before doing this though:

1. If you are on 5.2.0-x, you will not be able to inspect HTTPS traffic. Only version 5.5.0+ has the ability to decrypt HTTPS traffic. Because of this, it is not recommended to redirect port 443 on WSA version 5.2.

2. You will most likely need to specify a service ID other then web-cache. On most Cisco devices, web-cache is reserved for port 80 traffic only and cannot be changed. Any other service ID will work as you want it to.

topic Configuring WCCP for http and https in Web Security

Configuring WCCP for http and https

Re: Configuring WCCP for http and https