Wireless Guest user filtering on explicit WSA

[ymadheka]

Hi Team,


We have a customer with guest connecting via wireless and want them to filter with WSA which is configured in explicit mode. Now they want to ensure that the proxy IP is not provided the guest user but still filter their internet access.

Saw the below link for the same:


https://supportforums.cisco.com/discussion/11891031/recommended-setup-wsa-guest-network


Is there any other feasible option as the customer doesn't accept above methodologies.


Thanks & Regards,

Yogesh Madhekar

[Tao Yang]

WCCP is the best option for this case. However you may be able to use PAC file or WPAD and then use a NAT to hide your WSA IP if you really don't want to expose it.

[ymadheka]

Hi Tao,

In case of PAC / WPAD file can you give details for the NAT hide how can we do it?

[Tao Yang]

You can create a static NAT for WSA IP and then use WPAD/PAC for the guest users to send all requests to NATed IP.