WCCP Redirection on ASA Problem

[isaqellari]

Hello everyone,

I have configured wccp redirection on ASA5520 for the http/80 and https/443 traffic to get redirected to two Ironport S160 proxies, but often or sometimes the redirection does not function and get lost. I should to submit again wccp commands on ASA in order the redirection functions again.

Any idea ?

BR,

Ilir

[edadios]

Hello Ilir,

There are some known issues, discussed in KB articles.

You can also do search using the tool.

http://ironport.custhelp.com , select Web Security Appliance  on search by product, and you can use keywords wccp, asa.

I suggest running a later code ASA, at least 8.2X.

And if you continue to have issues, please do raise a service request.

Regards,

Eric

[Tery Le Febvere]

Hello llir,

Eric is correct, I had a situation yesterday with a similar issue and the customer was running an older version of code (ASA 8.2.1) After upgrading the problem was resolved. I highly recommend upgrading your ASA to the latest code.

We have seen situations were the WSA for some reason loses the connection via WCCP and tries to re-negotiate with the ASA but the ASA fails to re-negotiate.

Hope this helps!

Tery

[Jeffrey Ness]

Just in case you aren't as familiar with your ASA and are upgrading from 8.2 or lower to 8.3 or higher older models need a memory upgrade. The ASA software version release notes cover this thoroughly.

[isaqellari]

Hello everybode,

I have already upgraded the software of ASA. It seems that now the problem is not happening anymore.

We are anyway monitoring it.

Thanks for all the support guys.

BR,

Ilir

[Tery Le Febvere]

You welcome.

Thanks,

Tery