Cisco ASA 5520 Ver8.4, WCCP problem with Bluecoat ProxySG

[darrenkohcc]

Hi All,

I am working with a Cisco ASA 5520 with a Bluecoat Proxy SG for WCCP redirection.

I am able to view the web-cache engine in the ASA5520 and saw that the redirection traffic is increasing on the ASA 5520.

But the users is still not able to suft the web through using WCCP transparent mode to the blue coat, please advise and help.

Below is my configuration of the ASA5520 and the result;

Proxy int interface IP: 10.130.0.66, 10.130.0.67

Firewall Lan interface IP: 10.130.0.60

access-list WCCP extended permit tcp 10.130.0.0 255.255.248.0 any eq www

access-list WCCP extended deny ip host 10.130.0.66 any

access-list WCCP extended deny ip host 10.130.0.67 any

access-list WCCP extended permit tcp 10.130.0.0 255.255.248.0 any eq https

access-list bluecoatWSA extended permit ip host 10.130.0.66 any

access-list bluecoatWSA extended permit ip host 10.130.0.67 any

wccp 90 redirect-list WCCP group-list bluecoatWSA

wccp interface inside_lan 90 redirect in

Please advise on the solution?

Thanks

Darren Koh

[dbmarc1234]

Darren you should have already overcame this issue but let me tell you what I did. As wccp v2 does not work in L2 mode, you have to configure in L3 mode to get GRE working, in this case you must put ASA and Blue Coat in 2 different subnets.

Let me know if it helped.

Regards,

Diego Marcusso