Ironport WSA and ASA

[Frank Dukes]

Folks,

We currently have 2*S series box's performing our proxy and web filtering service.

This works fine for users on our LAN.

We also have some other segregated LANS that we would also like their web requests to be filtered.

Historically we were able to accomplish this by entering our Websense Server IP in the "URL Filtering Servers" section of the ASA.

This meant all url requests were first sent to our websense server before being returned to the end user.

Is this functionality available with our current Ironport setup.

Regards

[Jennifer Halim]

No, unfortunately the URL filter functionality on the ASA is only available for Websense and N2H2 as those are legacy configuration option that the ASA has.

For WSA, you can configure WCCP on the ASA to redirect the traffic, however, the WSA and the user needs to be behind the same ASA interface.