WSA High availability Question

[sriramojurajiv]

1)Can we create HA wherein

Primary WSA=physical appliance and Standby WSA=virtual appliance ?

2)How licenses are managed in HA? Does all primary licenses transfer to standby or need to install additional licenses on stand-by? 

3)Can we use Both explicit forward  mode and transparent mode together?

example:- 

PC----->SWITCH----->FIREWALL---INTERNET
                  |

                WSA

PC using explicit forward mode where proxy settings  is configured in their browser.

Question:-If any user removes proxy in their browser can we still use WCCP in firewall to redirect the traffic to WSA?

Appreciate your help.

[Ken Stieers]

1) Yes HA can be both hardware and VM

2) Each box has its own set of licenses. When you get your first VM license, its based/duplicates what's on your hardware, but it doesn't cost anything... and you can deploy as many VMs as you need to. The licensing is PER USER, so keep that up to date/add users as your company grows, etc.

3) Yes, set up the boxes as Transparent mode, WCCP will redirect to them in its own load balanced fashion, the explicit proxy is still there.



Query, If you're going to use WCCP why bother with the headache of using proxy settings? And for that matter the WSA HA config? (since WCCP will just do it for you...)

[sriramojurajiv]

Thank you for your quick response.
One last question.
2)reg License, For example i have purchased Sophos/Webroot license for Primay device.
after configuring secondary WSA, does these Sophos/Webroot license of Primary device get synchronize to Standby device aswell, I'm I  Correct?

Curently we are using explicit forward mode. where all Users have proxy settings in their Browsers(pushed by GPO)
We are planning to move to WCCP configured in Firewall.

[Ken Stieers]

Yes. When you request the license from Global Licensing Operations, it should match your hardware license completely

[timothy.wong]

Cisco WSA HA required 2x license ?

[Ken Stieers]

No. It's sold by user count, though each physical box has a cost.

If you buy hardware sales should help you get the stuff licensed, though sometimes you have to go to Global Licensing Operations to get it squared up


For VMs you spin up as many as you need and then just load the same license file on each one.