We are evaluating the Cisco WSA virtual appliance as a replacement for our current solution. Cisco's hardware requirements say the following for VMWare ESXi deployment:
"Cisco UCS servers (blade or rack-mounted) are the only supported hardware platform"
I am deploying this on a UCS blade server so we're meeting the above requirement. However I'm running into an issue. Our current solution can filter on protocol and block non-allowed protocols. I need to make sure we retain this functionality in the new solution. From what I've read L4TM seems like the answer in WSA. However, in order to use the L4TM functionality you have to connect the T1 interface to a SPAN port. From what I know about the Cisco UCS blade server this isn't possible. I'm curious how people have gotten around this issue? If I'm running on a blade server will I not be able to use L4TM to monitor ports other than 80/443? Is there another way to monitor and block non-allowed protocols?
Thanks.
