cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
927
Views
0
Helpful
4
Replies
Highlighted
Beginner

WSA dpi, proxy

Hi,

Correct me if I'm wrong. As I understand transparent proxy != DPI because transparent proxy have some functional limitations and dpi haven't. So the WSA's web filters and rules are based on transparent proxy that will affect some type of traffic or not?

4 REPLIES 4
Highlighted
Cisco Employee

Hi,

Deep Packet Inspection will be more likely what a FW does; it does protocol enforcement; check if the traffic is compliante with the RFC and so on..

The WSA can act as Explicit proxy (change the proxy settings on the browser) or transparent proxy that will be redirect the traffic through WCCP so there are no settings on the client itself so the user won't noticed that the HTTP/HTTPS/FTP is been monitored until it tries to access a malicious site.

We can't compare DPI with transparent proxy; this are two different concepts

HTH

Luis Silva

"If you need PDI (Planning, Design, Implement) assistance feel free to reach us"

http://www.cisco.com/web/partners/tools/pdihd.html

Luis Silva
Highlighted

Hi Luis,

Thank you for answer. Maybe I'm missing something but i thought that AVC is the part of DPI. So if the transparent proxy differs from DPI would it affect traffic with some possible unexpected effect?

Highlighted
Beginner

I've   been able to bypass any blocked websites using thisproxy   freely https://www.iwasel.com/en/. It is the best way to open blocked   websites everywhere.
Highlighted

If https decryption is working then https://www.iwasel.com/en/ can be blocked preventing the proxy avoidance.