11-20-2013 01:11 PM - edited 03-11-2019 08:07 PM
Hi Everyone,
We would soon be replacing our local web filter with symantec cloud web filtering. How to configure external proxy on the ASA to point to the web server in the cloud. we want to send both http and https traffic to the cloud web server on port 3128
ASA 5540 ver 8.2
11-20-2013 11:04 PM
That is nothing that the ASA can do for you. Or more exactly, only with newer ASA-software, it is possible for Cisco cloud security (scansafe).
What you still can do:
1) point each PC to the external proxy.
2) send all web-traffic to an internal proxy which can forward the traffic to your external proxy. For that WCCP could be used on the ASA to redirect all traffic to the internal proxy without having to reconfigure each internal client.
11-21-2013 06:21 AM
Hi Karsten,
Thank you for your response!
What is the minimum IOS required to be able to set up external web proxy server on the ASA?
Would that just support cisco cloud security?
Thanks,
11-21-2013 06:36 AM
I am not sure if the customer is talking about this:
Cisco Cloud Web Security provides web security and web filtering services through the Software-as-a-Service (SaaS) model. Enterprises with the ASA in their network can use Cloud Web Security services without having to install additional hardware.
When Cloud Web Security is enabled on the ASA, the ASA transparently redirects selected HTTP and HTTPS traffic to the Cloud Web Security proxy servers. The Cloud Web Security proxy servers then scan the content and allow, block, or send a warning about the traffic based on the policy configured in Cisco ScanCenter to enforce acceptable use and to protect users from malware.
Or the NAT configuration that can redirect all Web and HTTPS traffic
Value our effort and rate the assistance!
11-21-2013 06:51 AM
you need at least v9 on the ASA which is a major update from v8.2. And yes, only Cisco Cloud Web Security is supported.
--
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide