topic Re: Http/Https only traffic redirection to Cisco WSA or Umbrella in Web Security

Http/Https only traffic redirection to Cisco WSA or Umbrella

nirmal.joshi — Tue, 29 Jan 2019 08:50:46 GMT

Hi,

I believe Cisco WSA and Umbrella both support Http/Https and other kind of traffic like FTP etc.

Is there an option available somewhere in management console (Umbrella and WSA) to allow only the Http/Https traffic redirection to the WSA or Umbrella?

Thanks

Nirmal Joshi

Re: Http/Https only traffic redirection to Cisco WSA or Umbrella

Sheraz.Salim — Tue, 29 Jan 2019 09:16:05 GMT

in that case you have to use the WCCP (Web Cache Communication Protocol).

Re: Http/Https only traffic redirection to Cisco WSA or Umbrella

nirmal.joshi — Tue, 29 Jan 2019 10:42:05 GMT

Hi Sheraz,

Thanks for your input but can you please elaborate a little more on how exactly this is achieved.

Regards

Nirmal Joshi

Re: Http/Https only traffic redirection to Cisco WSA or Umbrella

Sheraz.Salim — Tue, 29 Jan 2019 10:48:36 GMT

here is the link for example

https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6500-series-switches/white_paper_c11-629052.html

https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118006-configure-wccp-00.html

https://www.cisco.com/c/en/us/support/docs/application-networking-services/500-series-content-engines/4074-wccp-redirects.html

Re: Http/Https only traffic redirection to Cisco WSA or Umbrella

Lokesh Kumar Lal — Tue, 29 Jan 2019 18:31:01 GMT

Refering to WSA* :If you have the device setup with appropriate licensing and enabled HTTPS decryption you could achieve that with explicit mode (with or without a PAC) file or go for WCCP/ Policy based routing. It won't be interfacing with other traffic anyhow and if not setup for that.

Re: Http/Https only traffic redirection to Cisco WSA or Umbrella

nirmal.joshi — Wed, 30 Jan 2019 05:31:01 GMT

you mean other traffic like FTP wont be redirected unless it is configured. Is that understanding right?
Also, would you know how does denying FTP traffic redirection works in case of Umbrella

Thanks
Nirmal Joshi