application/octet-stream

[tpospisil]

I am using WSA in transparent mode, ASA as WCCP redirector. I can not get some pages. (www.arspoetica.sk for instance) Browser (Mozila) open file save dialog with application/octet-stream application. But there is no such a stream from this page. When I configure  (in my browser) the same WSA as explicit proxy, pages are displayed correctly. The same if I configure proxy bypass for this web sites.

I do packet capture from my PC and I saw I did not get 200OK response, but communication seems the same.

[Atazazuddin Shaikh]

Hello

Thanks for reaching out, Are the non working sites are https URL?  or http?,

Please let me/us know,

Regards,

Zack

[tpospisil]

Hi Zack,

there are http URL. WCCP redirection on ASA is configured only for port TCP/80. HTTPS connections (TCP/443) goes directly to internet. When I did packet capture, I was looking particulary for this, because I know, that proxying https is an issue.

But I have problem only with transparent redirection of some (very few) http URL. And when I configure the same WSA proxy as explicit in client browser, it work without problem.

[Atazazuddin Shaikh]

Thank you! for your response and update provided,  if these sites/URL are http and failing through appliance,  Please create a TAC case so we can help you isolate and resolve this issue ASAP.

PS. As for the https site in transparent mode, we MUST enabled - configure https proxy on the WSA appliance.  otherwise you will get mixed results.

Regards,

Zack

[Atazazuddin Shaikh]

Here are the steps by step process for https proxy:

Steps to configure HTTPS Proxy and CSR Option on Web Security Appliance:
https://www.youtube.com/watch?v=1g_96XYnkz4&feature=youtu.be

Steps to enable HTTPS proxy on (WSA) & Uploading Root/Intermediate certificate option.
https://supportforums.cisco.com/video/11932521/steps-enable-https-proxy-wsa-uploading-rootintermediate-certificate-option

Thanks

Zack

[Erik Dahle]

I tried the page www.arspoetica.sk here, and it failed for me as well.

Running Version: 8.5.2-027 in transparent mode.