Infrastructure Help Where to Place the Cache 505

[herzogb]

Should I put our cache server before our Pix Firewall or in the DMZ?

[jbaigorr]

This depends on where your wccp router is located. The rule of thumb is to place the cache engine closest to the clients.If your wccp router is on the outside of the firewall and your CE is either on the inside or DMZ you would have to create a conduit for GRE and a static for translation for the CE. Keep in mind that by placing the CE on the inside or the dmz, there will be extra traffic going through the pix because of the wccp redirection.

I hope this helps.

Gonzalo

[jbaigorr]

I made the assumption that you are using a Cache Engine and are running WCCP. If this is not the case or if you are in Proxy mode I would place it in the dmz.