Cisco S000V 10.1.3-054 refused connections - Explicit Proxy

[mazam]

I've deployed an S000V Web Security Virtual Appliance with a demo license an all default configurations using the quick start guide.

It only has the M1 interface 10.0.0.2.

I configured my PC LAN proxy settings for 10.0.0.2:3128 and again for port 80.

When I configure the PC LAN proxy then my access to the internet breaks.  Chrome says ERR_PROXY_CONNECTION_FAILED, Firefox says the proxy refused the connection.

log files aclog, proxyerrlog and system files are attached for the reference

Where can I start to make this work as an explicit web proxy?

thank you,

[balaji.bandi]

M1 is only for Management, if you like to setup a proxy you need to have internet routes sending out to the internet, not sure how this WSA connected to the internet.

check below document :

http://www.network-node.com/blog/2016/8/16/wsa-setup

[mazam]

Hi Balaji,

thanks for your response. M1 set to default gateway and has done verification using sending some icmp's sourcing by M1.

so in short i do have internet reachability using M1 interface. 

I do have followed all the steps mentioned in kb unfortunately it didn't worked out for me.

[balaji.bandi]

if you followed the steps and interface have internet reachability. then make sure you have bounded the ports to right interface use below thread example :

https://community.cisco.com/t5/web-security/brand-new-wsa-demo-refusing-to-proxy-web-traffic/td-p/2733152

[mazam]

yes M1 is listening on 3128 and 80. 

Since i have verified using netstat and nmap both ports are open and in LISTEN state

[balaji.bandi]

I have provided what is the best to setup, most of the replies come back you have done all but sitll not working.

since we do not know what settings were done there. so please post all the screen short and ACP rules you setup one which shows allows.

also check the Logs command level 

ssh to WSA

> grep 

>1

> Enter

>enter

> Y (tail the logs)

> enter

Browse the site it will give you logs of why it was failing.

https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/117830-qanda-wsa-00.html

[mazam]

Hi Balaji,

thanks for sharing kb's that really helpful.

attached are the relevant screen shots for the solution. i have checked using wsa cli i have internet reahability and dns resolution is working as expected.