Routing(Threat Pulse)

[Kesar123456]

Hi,

Our current setup is like all the internet traffic is filtered by checkpoint. Also we are allowing all the port 80/443 traffic in checkpoint.

Then we have 7206 internet routers.

We are now try to install Threat Pulse(Bluecoat) which is on the cloud and for that we have to build one IPSEC tunnel.

Through this, we will control our port 80/443 traffic.Previously Blucoat was inside our network.

So i have couple of question.

1. Where should we build this IPSEC  tunnel.

2. How will we route http/https traffic through this tunnel and rest should take the same way.

Thanks

Arun

[Kesar123456]

Anyone worked on this Scenario.

[Vivek Ganapathi]

Hello Arun,

You need to build an IPSEC tunnel to the Threat Pulse service provider. Below is a document if found on Threatpulse portal.

https://bto.bluecoat.com/sgos/ThreatPulse/ThreatPulseAccessMethodsWebGuide/Content/Deployment/Tasks/CiscoASAClass/csco_asa_config_ta.htm

In order for you to route http/https traffic through the tunnel, you need to use Policy Based routing.

Thanks

Vivek

[Kesar123456]

Hello Vivek,

We have already created IPSEC tunnel on one of our test router and it is working fine.

As we are doing it for the first time and have to implement in the live enivornment, just want to take all the precaution.

Should we build the IPSEC tunnel on our internet router and can you please share me some policy based routing configuration for this setup.

Thanks

Arun