cut-through proxy authentication and wccp

[andresmardones]

I'm designing a Security solution for a customer.

I'm going to put an ASA Appliance and I will need to authenticate and authorize users. Additionally I will use WCCP with a transparent proxy.

I have some doubts:

What takes precedence first, WCCP or AAA authentication commands?

If I enable WCCP, will the authentication still work?

Thank you!

[ebreniz]

I am thinking of authenticating the users with username and password prior to establishing connections over the ASA. I think this can be done somehow with the cut-trough proxy feature. Unfortunately i have no ACS Server available so the cut-through approach is not possible. No doubt If you enable WCCP, it not will work.

[fermendo]

Hi,

Here is part of ASA 8.4 CLI config guide, you can find it on:

http://www.cisco.com/en/US/partner/docs/security/asa/asa84/configuration/guide/asa_84_cli_config.html

WCCP Interaction With Other Features

In the ASA implementation of WCCP, the protocol interacts with other configurable features according

to the following:

•

Cut-through proxy will not work in combination with WCCP.

Hope this helps