07-13-2011 07:05 AM
Hey People,
I am new to ironport, deploying two S160's. Does the 1st ironport push policies to the 2nd ironprt or does the policies needs to be created again on the 2nd one as well ? I could not find any documentations on this or "deploying in HA" in general, If there are any please point me towards it. I am also facing problems on the wccp front, if someone could point me to that procedure as well ??
Thanks a lot. hoping a for a quick reply.
07-13-2011 07:39 AM
I used this when setting up WCCP with my ASA.
Keep in mind that the outbound traffic from your users has to come through the same interface on the ASA that your WSA is on. (ie. you can't put the WSA in the DMZ and redirect to it via WCCP).
IIRC, setting up WCCP for multiple units is the same, but you need an 2 extra acls to keep traffic redirected to one WSA from being redirected to the other WSA.
As far as configs go, I'm pretty sure you can export from one, and import to the other...
07-13-2011 08:09 AM
thanks for the ultra quick response, i will try that and update. Meanwhile if someone can throw some more light regarding HA it would be very helpfull.
07-17-2011 12:15 PM
You will need a management appliance, ie M160 to push policies to both S160s at the same time.
If you dont have a M-series appliance you have to create the polices two times.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide