Cisco S170 Bedienungsanleitung PDF herunterladen (Seite 41)

Cisco Public BRKSEC-2101

WCCP with ASA

access-list WCCPRedirectionList extended deny ip 172.16.10.0

255.255.255.0 172.16.10.0 255.255.255.0

access-list WCCPRedirectionList extended permit tcp any any eq www

access-list WCCPRedirectionList extended permit tcp any any eq https

wccp 90 redirect-list WCCPRedirectionList

wccp interface INSIDE 90 redirect in

Internet

 ASA allows only „redirect in“

Client and WSA must be on same interface

No DMZ Deployment possible....

 Inside ACL is checked before redirection

Destination Server must be allowed in ACL

 Redirection Method is GRE based

 Redirect ACL allows permit and deny

 No TCP Intercept, Inspect Engine or internal

IPS is applied to the redirected flow.

 IPS HW Module however does inspect traffic

1 2 ... 36 37 38 39 40 41 42 43 44 45 46 ... 116 117

Keine Kommentare

Cisco S170 Bedienungsanleitung Seite 41