Use egress IP when visiting specific site instead of CWS tower IP address.

[Antony Paul]

Hello,

There is a website users connect to that only allows whitelisted IP addresses.  The issue we have is that when accessing the site they will be going via CWS and using a public IP address we have no control over.  Please can someone advise how we can configure CWS so that when users connect to example.com that website will see that they are coming from our own WAN IP (configured on a CIsco ASA 5525X) rather than any CWS IP address.

I tried adding the domain to our External Direct custom polciy list but that hasn't worked.  What is the correct way to handle this?

[Edan Mudachi]

Hi Anthony,

   Here is a link to the ASA Connector deployment guide, look for the section labeled CWS Whitelisting.

https://www.cisco.com/c/dam/en/us/products/collateral/security/cloud-web-security/cws_asa_5500_asav.pdf

If you require further assistance, please open a TAC case.

Sincerely,

Edan Mudachi

[antonypaul]

Thanks that is useful