WSA design guidance

[shaikh.zaid22]

hi,,

we are in the process of acquiring cisco wsa for content filtering and other purposes. i am looking for guidance from design perspective, where can we best place the wsa?

Our design we have small dmz  for guest wireless network only, since all infrastructure is managed in azure.

secondly, we have on-premise  ucs chassis with blades servers which is having AD, DNS etc.

What would be recommended to position the wsa in our environment..

1) Between Perimeter firewall and core switch OR

2) in the DMZ where we have only guest wireless network 

Need guidance folks.. 

[balaji.bandi]

Still this is valid :

https://www.cisco.com/c/en/us/products/collateral/security/web-security-appliance/guide-c07-742373.html

1. outside interface DMZ towards interface P1/P2

2. On inside interace P1/P2 towards core

3. M1 for out of band management.

[shaikh.zaid22]

Thanks balaji for the reply.

The document is about configuration best practices.

my query was about placement of WSA within my environment as i described above.

[balaji.bandi]

i have suggested the best practice?

1. outside interface DMZ towards interface P1/P2

2. On inside interace P1/P2 towards core

3. M1 for out of band management.