cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
511
Views
5
Helpful
1
Replies

Anyone using WSA with ASA with Firepower?

michaellperrin
Level 1
Level 1

I'm looking for some feedback.

We have recently deployed Firepower services on our ASA, but want to keep using the WSA for web filtering.

The issue I'm having is that all web connections on the firepower services is sourced from the WSA as expected. I know I can use the XFF header but it really doesn't work that well.

Just trying to see what other people are doing? Getting rid of WSA? 

1 Reply 1

Ravi Singh
Level 7
Level 7

you already have an existing Ironport  appliance, you can do similar features on the ASA with Firepower but not all features are supported. Both the Data Sheet for the WSA and At-a-Glance for the FirePOWER services will provide you with the differences.  If you are only using common features then it will be best to utilize the Ironport as a Web Proxy server or for Web Caching and then have FirePOWER services on the ASA do the features you have been doing on the Ironport

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: