topic WSA dpi, proxy in Web Security

WSA dpi, proxy

Ilya Geraskin — Thu, 24 Oct 2013 07:16:53 GMT

Hi,

Correct me if I'm wrong. As I understand transparent proxy != DPI because transparent proxy have some functional limitations and dpi haven't. So the WSA's web filters and rules are based on transparent proxy that will affect some type of traffic or not?

WSA dpi, proxy

Luis Silva Benavides — Fri, 25 Oct 2013 19:57:54 GMT

Hi,

Deep Packet Inspection will be more likely what a FW does; it does protocol enforcement; check if the traffic is compliante with the RFC and so on..

The WSA can act as Explicit proxy (change the proxy settings on the browser) or transparent proxy that will be redirect the traffic through WCCP so there are no settings on the client itself so the user won't noticed that the HTTP/HTTPS/FTP is been monitored until it tries to access a malicious site.

We can't compare DPI with transparent proxy; this are two different concepts

HTH

Luis Silva

"If you need PDI (Planning, Design, Implement) assistance feel free to reach us"

http://www.cisco.com/web/partners/tools/pdihd.html

WSA dpi, proxy

Ilya Geraskin — Mon, 28 Oct 2013 05:08:56 GMT

Hi Luis,

Thank you for answer. Maybe I'm missing something but i thought that AVC is the part of DPI. So if the transparent proxy differs from DPI would it affect traffic with some possible unexpected effect?

WSA dpi, proxy

dinaafifi — Fri, 22 Nov 2013 18:28:55 GMT

I've been able to bypass any blocked websites using thisproxy freely https://www.iwasel.com/en/. It is the best way to open blocked websites everywhere.

WSA dpi, proxy

Tom Foucha — Tue, 26 Nov 2013 15:43:11 GMT

If https decryption is working then https://www.iwasel.com/en/ can be blocked preventing the proxy avoidance.