WSA dpi, proxy

[Ilya Geraskin]

Hi,

Correct me if I'm wrong. As I understand transparent proxy != DPI because transparent proxy have some functional limitations and dpi haven't. So the WSA's web filters and rules are based on transparent proxy that will affect some type of traffic or not?

[Luis Silva Benavides]

Hi,

Deep Packet Inspection will be more likely what a FW does; it does protocol enforcement; check if the traffic is compliante with the RFC and so on..

The WSA can act as Explicit proxy (change the proxy settings on the browser) or transparent proxy that will be redirect the traffic through WCCP so there are no settings on the client itself so the user won't noticed that the HTTP/HTTPS/FTP is been monitored until it tries to access a malicious site.

We can't compare DPI with transparent proxy; this are two different concepts

HTH

Luis Silva

"If you need PDI (Planning, Design, Implement) assistance feel free to reach us"

http://www.cisco.com/web/partners/tools/pdihd.html

[Ilya Geraskin]

Hi Luis,

Thank you for answer. Maybe I'm missing something but i thought that AVC is the part of DPI. So if the transparent proxy differs from DPI would it affect traffic with some possible unexpected effect?

[dinaafifi]

I've   been able to bypass any blocked websites using thisproxy   freely https://www.iwasel.com/en/. It is the best way to open blocked   websites everywhere.

[Tom Foucha]

If https decryption is working then https://www.iwasel.com/en/ can be blocked preventing the proxy avoidance.