cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1169
Views
15
Helpful
7
Replies

WSA Proxy setting

asma0alhamed
Level 1
Level 1

We are using wsa as a proxy , how I can check if we are using Load balance based on server address or client address in the service settings ?

1 Accepted Solution

Accepted Solutions

amojarra
Cisco Employee
Cisco Employee

Hi @asma0alhamed 

WSA don't have Load balancing option by itself. 

amojarra_0-1668608435997.png

 

the Load balancing which is mentioned in the User guide is between WSA and its upstream Proxies .

as you surely know there are two types of Proxy deployment, 

 [1] Explicit mode (which you configure Proxy's IP and port in the Browser)

    [1-1] you can manually add the configuration 

   [1-2] you can push this configuration via Group policy

    [1-3] you can use PAC file to introduce the configuration to browsers 

[2] Transparent mode (which a layer3 and higher device will redirect HTTP & HTTPS traffic to WSA) 

     [2-1] using WCCP for traffic redirection 

    [2-2] using PBR (policy-based routing)

 

 

==================================

To implement the load balancing:

in case of [1-1] and [1-2], you can manually distribute them for example 50% of your clients redirected to one Proxy the rest to other 

for [1-3] you can have two PAC files, configure some of your client to get the first PAC and the rest other PAC file, in which, those PAC files are pointing at deferent WSAs as the Primary Proxy (you can have failover configuration in the PAC file)

PAC - Proxy Auto-Configuration (PAC) file (fileformat.com)

 

for [2-1] and [2-2] you can load balance by the technology , more information can be found at "About WCCP Load Balancing" section in the user-guide

=========================

Also, you can have load balancer in the network and let that, handle the task for you 

 

 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++

 

 

View solution in original post

7 Replies 7

balaji.bandi
Hall of Fame
Hall of Fame

depends on the setup - how is your proxy configured ? PAC file or WPAD ?

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

@balaji.bandi from where can I check them ?

For WCCP, in the gui, go to Network/Transparent redirection.

Click on the service profile and you'll see the the check boxes.


asma0alhamed
Level 1
Level 1

asma0alhamed_0-1668082466306.png

No check boxes there ,

we are using S190 , Version 12.5.1

 

 

 

wsa.jpg

So you're using explicit redirection, NOT WCCP.

Look at your endpoints... I've never bothered with explicit, so I can't direct you where to look...

check on end device what config on the browser :

balajibandi_0-1668085861040.png

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

amojarra
Cisco Employee
Cisco Employee

Hi @asma0alhamed 

WSA don't have Load balancing option by itself. 

amojarra_0-1668608435997.png

 

the Load balancing which is mentioned in the User guide is between WSA and its upstream Proxies .

as you surely know there are two types of Proxy deployment, 

 [1] Explicit mode (which you configure Proxy's IP and port in the Browser)

    [1-1] you can manually add the configuration 

   [1-2] you can push this configuration via Group policy

    [1-3] you can use PAC file to introduce the configuration to browsers 

[2] Transparent mode (which a layer3 and higher device will redirect HTTP & HTTPS traffic to WSA) 

     [2-1] using WCCP for traffic redirection 

    [2-2] using PBR (policy-based routing)

 

 

==================================

To implement the load balancing:

in case of [1-1] and [1-2], you can manually distribute them for example 50% of your clients redirected to one Proxy the rest to other 

for [1-3] you can have two PAC files, configure some of your client to get the first PAC and the rest other PAC file, in which, those PAC files are pointing at deferent WSAs as the Primary Proxy (you can have failover configuration in the PAC file)

PAC - Proxy Auto-Configuration (PAC) file (fileformat.com)

 

for [2-1] and [2-2] you can load balance by the technology , more information can be found at "About WCCP Load Balancing" section in the user-guide

=========================

Also, you can have load balancer in the network and let that, handle the task for you 

 

 

Regards,

Amirhossein Mojarrad

+++++++++++++++++++++++++++++++++++++++++++++++++++

++++   If you find this answer helpful, please rate it as such  ++++

+++++++++++++++++++++++++++++++++++++++++++++++++++