WCCP and ASA

[whanson]

Customer purchased websense content gateway which is dependent on wccp. But from I can see the only configuration the ASA supports WCCPwise is that all clients and the wccp server have to be directly on the same subnet that that ASA is on. Is that still true.

Bill

[mirober2]

Hi Bill,

The ASA and the WCCP server do not have to be in the same subnet, but they do need to be off the same ASA interface.

In other words, your clients can be 192.168.1.x/24 and the WCCP server can be 192.168.2.x/24, but the ASA's routing table needs to show that both of those subnets are off the same interface.

Here is the documentation for that:

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/access_wccp.html#wp1119801

The only topology that the ASA supports is when client and cache engine are behind the same interface of the ASA and the cache engine can directly communicate with the client, without going through the ASA. 

Hope that helps.

-Mike

[whanson]

Fantasic...thx