Technology Overview The Cisco IronPort Web Security Appliance (WSA) is a web proxy that works with other Cisco network components to monitor and control outbound requests for Web content and scrubs return traffic for unwanted or malicious content (Figure 1). Figure 1. Logical Traffic Flow Using WSA The Cisco WSA is deployed on a network using one or more interfaces that are used to forward requests and responses. Traffic can be directed to the WSA using either explicit proxies configured on the end host, or using a network protocol like Web Cache Control Protocol (WCCP) running on an inline device like the perimeter firewall or router. Configration example 1. Allow the Ironport out through the firewall: access-list acl_inside extended permit tcp host 192.168.1.1 any 2. Create a new acl containing the members of the wccp group. in our example, it is just 1 Ironport access-list ironport-allow extended permit ip host ...
Comments
Post a Comment