Cisco Cisco Web Security Appliance S670 User Guide

Proxy Mode

Choose how to deploy the Web Proxy:

Transparent mode. Clients applications are 
unaware of the Web Proxy and do not have to be 
configured to connect to the proxy. In transparent 
mode, the Web Proxy can accept both transparently 
redirected and explicitly forwarded connections.

 

For more information, see 

.

Explicit forward mode. Client applications, such as 
web browsers, are aware of the Web Proxy and must 
be configured to point to a single Web Security 
appliance. In explicit forward mode, the Web Proxy 
can only accept explicitly forwarded connections.

 

For more information, see 

IP Spoofing

Choose whether or not the Web Proxy should spoof IP 
addresses when sending requests to upstream proxies and 
servers. 

When the Web Proxy is deployed in transparent mode, 
you can enable IP spoofing for transparently redirected 
connections only or all connections (transparently 
redirected and explicitly forwarded).

When IP spoofing is enabled, requests originating from a 
client retain the client’s source address and appear to 
originate from the client rather than from the Web 
Security appliance. 

Note: When IP spoofing is enabled and the appliance is 
connected to a WCCP router, configure a WCCP service 
to redirect the return path.