Transparent Upstream Proxy & Explicit Forward Upstream Proxy

[lambay2000]

Hello Friends,'

I have a Windows ISA as a Proxy Server, who is forwarding client request based on user authentication,All user Internet traffic is forwarded to proxy server becz they have proxy server ip address configuired in thier browser. If i m placing the Iron Port in the network with existing proxy than i have to reconfigure the client desktop to hit traffic on iron port IP address and then ironport will route traffic to existing proxy. Please correct em if i m wrong ?????????

And also i have to keep the Iron port in Explicit forward Upstream proxy mode?????? correct me?????

I have read the user guide from cisco website but still i have a doubt please clear my above doubt.

Thanks

[Ken Stieers]

You're correct.

Point the users at the Ironport, with the Ironport in explicit mode.  You can also config the Ironport to be aware of and deal properly with the ISA proxy. (In the GUI, under Network/Upstream Proxy).

[lambay2000]

Hello Ken,

Thanks for ur  reply

I hava a core 6509 on my core layer can it act as WCCP router ????? to redirect traffic to the iron port  if i plan Iron port as a transparent proxy to all clients ,Does this design will work.

So that i can remove the windows proxy server from the network.

Thanks

[edadios]

You can do wccp on 6509, just check if the image you got support it.

http://tinyurl.com/6efr4eg

Here is the 6509 wccp guide for 12.1 http://www.cisco.com/en/US/customer/docs/switches/lan/catalyst6500/ios/12.1E/native/configuration/guide/wccp.html

I hope this information helps you.

Regards,

Eric

[lambay2000]

Thanks for ur reply Eric,

Is this is a good Design ???

Thanks

[edadios · Accepted solution]

Design will depend on your requirement.

Here is a document that has some infomration on difference between explicit and transparent mode.

http://tinyurl.com/2s8fxz

Otherwise, we have lots of customers using the proxy in transparent mode, and it works. It is all dependent on your requirement.

Regards,

Eric

[lambay2000]

Hello, eric

Thanks