topic IRONPORT S170 failover in Web Security

IRONPORT S170 failover

hkvt012345 — Thu, 13 Jun 2013 04:18:13 GMT

All,

we got one CiscoIronport s170 on two site, we would like to implement that if one of applicance failed, then the internet traffic will route to another appliance. I understanding that if device connect to L4 switch, it can do that.

if so, may i ask any document provide to set this up?

We currently connecting the device with Cisco 3560x switch..

IRONPORT S170 failover

Luis Silva Benavides — Tue, 25 Jun 2013 18:31:01 GMT

Hi,

You can take a look to this other post

https://supportforums.cisco.com/thread/2086719

But here you have a summary

High availability with the WSA can be achieved by the various deployment methods.

1. PAC files can contain entries directing clients to multiple WSA's based upon various network factors or machine characeteristics.

2. WCCP protocol includes load sharing across multiple WSA

3. Manually configuring clients to different WSA

4. Automatic configuration scripts to point users to specific WSA's based upon subnets, etc

5. Load Balancers that redirect clients to a VIP that points to multiple WSA

6. Layer 4 redirection that can distribute load across multiple devices.

Luis Silva

"If you need PDI (Planning, Design, Implement) assistance feel free to reach"

http://www.cisco.com/web/partners/tools/pdihd.html

IRONPORT S170 failover

hkvt012345 — Wed, 03 Jul 2013 03:20:37 GMT

i would go for WCCP deloyment, since most of post would plan to WCCP deployed..is cisco 3560x POE and 3750X POE capable doing this?

any idea how i need to configure on the switch? many thanksss

IRONPORT S170 failover

Luis Silva Benavides — Wed, 03 Jul 2013 16:46:43 GMT

Please see the information below.

http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps10745/product_bulletin_c25-658743_ps6406_Products_Bulletin.html

Web Cache Communication Protocol (WCCP) deny access control entry (ACE) support on Cisco Catalyst 3560-E, 3750-E, 3560-X, and 3750-X: In previous releases, the WCCP protocol only supported permit ACEs in the redirect-list ACL. In this release, support for deny ACEs in the redirect list was added.

http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_44_se/release/notes/OL14630.html

Feature	Minimum Cisco IOS Release Required	Catalyst Switch Support

Web Cache Communication Protocol (WCCP)

12.2(37)SE

3750. 3560

How to configure WCCP on 3560

http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/12.2_55_se/configuration/guide/swwccp.html#wp1060724

HTH

Luis Silva

"If you need PDI (Planning, Design, Implement) assistance feel free to reach"

http://www.cisco.com/web/partners/tools/pdihd.html