deployment of SWA s396-15.2.X in Transparent/Layer 3 mode (Router)

[Rizwan Shah]

Dear Community

I have one scenario that "can we deploy SWA s396-15.2.X in Transparent/Layer 3 mode (Router) "so that it can accept http requests explicitly and as tcp/udp request forwarder by providing the routing function  as well , as for i know there is no such option right now but in previous version we had this option.

Regards

[balaji.bandi]

the deployment modes are not changed from ages - check below supported.

https://www.cisco.com/c/dam/en/us/td/docs/solutions/SBA/August2012/Cisco_SBA_BN_WebSecurityUsingWSADeploymentGuide-Aug2012.pdf

Proxy just provide the proxy features and not other major functionality, May be you need to Look NGFW with some features can support.

i am trying to understand the use case here, can you more elaborate about the goal. 

[Rizwan Shah]

Well BB the document you shared is very old 2012 now is 2025, anyway  fa me is proxy services is working fine with Transparent L4Switch option but here we have non http traffic you can say 20%  the purpose is to serve it via SWA otherwise we have to change our topology.

[Ken Stieers]

SWA isn't a general purpose router/firewall...
You can put one interface in the DMZ and one inside, and with proper routing defined, you can use either form of redirection (Transparent via WCCP/PBR or Explicit via config/PAC file) to send web traffic to the internal address. It will use the DMZ interface to reach external sites and return it to your users via the inside address.

[Rizwan Shah]

exactly i did the same i tried with 2 legs direct route then only with P1 and via PBR Interface but again we have non http traffic so we want to force via SWA because wireshark showing non http traffic