ASA CX as Explicit Proxy?

[cnegrete]

This one should be an easy one, but I haven't found any information on it.

Is there a way to configure the ASA CX as an explicit proxy?  I know that if I want active authentication I can use auth-proxy, and it does work fine, but in this customer's site we're looking forward to replace an existing explicit proxy, without having to reconfigure all the machines to disable it and allow direct connection, leaving the ASA CX to make the http inspection.

Thanks

[Tarik Admani · Accepted solution]

Hi,

You will not be able to use the CX as an explicit proxy which is one of the functional differences between the CX and the WSA. The CX runs inline, promiscous mode via the service policy for inspection.

Thanks,

Tarik Admani
*Please rate helpful posts*