Cisco ASA 5515-X and pfSense Squid Proxy

[Nathan Ohara]

I would like to setup a transparent proxy on our network using pfSense with Squid/Squidguard. Is it possible to define the pfSense box as a WCCP cache engine on the ASA? I have searched the internet if this is a feasible option but came up with little to no results. I am not sure if Cisco has put a restriction on what type of WCCP servers are allowed. Any help would be greatly appreciated. Thanks!

[Vibhor Amrodia]

Hi,

It will work as WCCP integration with Squid Proxy.

There is no restriction on the server being used as long as they support WCCP protocol.

Thanks and Regards,

Vibhor Amrodia

[Rishabh Seth]

Hi Nathan,

I found this link which talks about the WCCP configuration for cisco router and squid server.

http://www.crypt.gen.nz/papers/cisco_squid_wccp.html

I have not personally tried it so I am not sure but if the pf sense device is configured to have a GRE tunnel with ASA and allows WCCP, then the redirection should work.

Some other links:

https://forum.pfsense.org/index.php?topic=64299.0

https://doc.pfsense.org/index.php/GRE_Interfaces

Hope it helps!!!