Multiple Users subnets and WSA + ASA

[Oleg Volkov]

Hello Dear Sirs!

I have network topology, like we can see on the picture.

I have ASA inside interface and WSA P1 interface, in the one L2 segment, but users and Active Directory in other  L2 segments.

Can I use WSA as transparent proxy? and WCCP redirect I must do on the ASA or Catalyst?

Thanks!

------------------------------------------------------
Helping seriously ill children, all together. All information about this, is posted on my blog       

[Michael Hautekeete]

As long as both the client segments and the WSA are off of the same interface of the ASA you can do WCCP with the ASA and WSA. Based on your topology provided WCCP with the ASA should work.

Hope this helps.

Best Regards,

Michael Hautekeete

Customer Support Engineer

Cisco Content Security - Web Security Appliance

http://www.cisco.com/en/US/products/ps11169/serv_group_home.html

https://supportforums.cisco.com/community/netpro/security/web

https://supportforums.cisco.com/community/feeds?community=2091

[Oleg Volkov]

Thanks!

------------------------------------------------------
Helping seriously ill children, all together. All information about this, is posted on my blog

[Ken Stieers]

Yes you can use it as a transparent proxy.

You can do the WCCP on either the ASA or the 6500...

There is more documentation floating around in this forum about doing it on the ASA.  Make sure you're at 8.2 or higher on the ASA... earlier versions had stability issues in the WCCP code.

[Ken Stieers]

Here's a doc on how to do it on an ASA...

http://www.cisco.com/c/dam/en/us/td/docs/solutions/SBA/February2013/Cisco_SBA_BN_WebSecurityUsingCiscoWSADeploymentGuide-Feb2013.pdf

[Oleg Volkov]

Thanks!

I try to do it.