Http/Https only traffic redirection to Cisco WSA or Umbrella

[nirmal.joshi]

Hi,

I believe Cisco WSA and Umbrella both support Http/Https and other kind of traffic like FTP etc.

Is there an option available somewhere in management console (Umbrella and WSA) to allow only the Http/Https traffic redirection to the WSA or Umbrella?

Thanks

Nirmal Joshi

[Sheraz.Salim]

in that case you have to use the WCCP (Web Cache Communication Protocol). 

[nirmal.joshi]

Hi Sheraz,

Thanks for your input but can you please elaborate a little more on how exactly this is achieved.

Regards

Nirmal Joshi

[Sheraz.Salim]

here is the link for example

https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-6500-series-switches/white_paper_c11-629052.html

https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118006-configure-wccp-00.html

https://www.cisco.com/c/en/us/support/docs/application-networking-services/500-series-content-engines/4074-wccp-redirects.html

[Lokesh Kumar Lal]

Refering to WSA* :If you have the device setup with appropriate licensing and enabled HTTPS decryption you could achieve that with explicit mode (with or without a PAC) file or go for WCCP/ Policy based routing. It won't be interfacing with other traffic anyhow and if not setup for that.

[nirmal.joshi]

you mean other traffic like FTP wont be redirected unless it is configured. Is that understanding right?
Also, would you know how does denying FTP traffic redirection works in case of Umbrella

Thanks
Nirmal Joshi