topic Re: Vwire with WCCP in General Topics

Vwire with WCCP

shabeerc — Mon, 26 Dec 2011 17:00:23 GMT

I am planing put PAN Device on vwire mode just before traffic reach their Proxy solution. Traffic redirect using WCCP web traffic from Cisoc switch to Cisco Ironport.The Proxy device only has one NIC interface.In this secenario What we will see? Only WCCP traffic, or Web traffic, from Switch to Proxy, and Web responses from Proxy to Switch, where only Proxy IP is showed as source IP or can wee see all the user traffic.

Thanks

Shabeer

Re: Vwire with WCCP

Retired Member — Wed, 28 Dec 2011 02:52:00 GMT

I haven't worked with WCCP myself, but we do have app-ids for web-browsing, http-proxy and wccp. So one recommendation you can do is to start with allowing these applications through and then check your traffic logs. That should tell you what applications in particular you should be concerned with and then apply your rules accordingly.

Hope this helps.

Regards

-Richard

Re: Vwire with WCCP

shabeerc — Wed, 28 Dec 2011 04:07:53 GMT

Thanks richard

My concern is that if i position the Firewall between WCCP traffic(Here core and ironport), can i see the other web traffic.We need confirmation on this Any one tried this

Thanks

Shabeer

Re: Vwire with WCCP

mkopcic — Wed, 28 Dec 2011 11:53:58 GMT

Hello!

When router redirects traffic to proxy using WCCP, encapsulates packets in GRE so you will only see GRE traffic.

Best regards,

Maja