10-03-2009 08:30 AM - edited 03-06-2019 07:59 AM
I have a 2851 doing URL filtering with Websense. The inspect is called websense and applied to the inside interface of the router. Any requests from clients would be hitting this interface only. URL filtering is working as advertised.
Websense has the capability to filter protocols, i.e. FTP, NNTP etc... How do I configure the router to redirect protocol requests from the client to websense?
Below is a snippet of the Router configuration:
ip inspect name websense http urlfilter
ip inspect name websense ssh
ip inspect name websense ftp
ip urlfilter audit-trail
ip urlfilter urlf-server-log
ip urlfilter server vendor websense 10.60.7.36
interface GigabitEthernet0/0
description **LAN**
ip address 10.60.254.2 255.255.255.0
ip accounting output-packets
ip wccp 61 redirect in
ip nat inside
ip inspect websense in
ip virtual-reassembly
duplex auto
speed auto
snmp trap link-status permit duplicates
10-04-2009 07:30 AM
Hello Eric,
you have configured both WCCP and IP inspect on the interface.
IP inspect is a filter, WCCP has the capabilities to divert traffic to a web cache.
WCCPv2 is not limited to HTTP traffic, so you should see to whom the feature is redirecting traffic.
Eventually you should modify WCCP group 61 configuration to divert the other protocols to the websense appliance.
if this is not possible, that is WCCP destination is another device and/or Websense doesn't talk WCCP you should think to use PBR instead of WCCP.
PBR using multiple route-map clauses can do what you need.
Hope to help
Giuseppe
10-04-2009 09:50 AM
WCCP is being used for WAAS. I'm not sure if websense talks WCCP, i'll read on that one. Can I specify 2 WCCP lists on the same interface in the same direction?
10-04-2009 10:48 AM
Hello Eric,
I may be wrong but I don'think websense can talk WCCP.
being this a sw based router you should be able to add PBR for the Websense.
Hope to help
Giuseppe
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide