Cisco Cisco Web Security Appliance S670 User Guide

Load Balancing

If multiple DLP servers are defined, select which load 
balancing technique the Web Proxy uses to distribute 
upload requests to different DLP servers. You can 
choose the following load balancing techniques:

None (failover). The Web Proxy directs upload 
requests to one DLP server. It tries to connect to the 
DLP servers in the order they are listed. If one DLP 
server cannot be reached, the Web Proxy attempts to 
connect to the next one in the list.

Fewest connections. The Web Proxy keeps track of 
how many active requests are with the different 
DLP servers and it directs the upload request to the 
DLP server currently servicing the fewest number 
of connections.

Hash based. The Web Proxy uses a hash function to 
distribute requests to the DLP servers. The hash 
function uses the proxy ID and URL as inputs so 
that requests for the same URL are always directed 
to the same DLP server.

Round robin. The Web Proxy cycles upload 
requests equally among all DLP servers in the listed 
order.

Service Request 
Timeout

Enter how long the Web Proxy waits for a response from 
the DLP server. When this time is exceeded, the ICAP 
request has failed and the upload request is either 
blocked or allowed, depending on the Failure Handling 
setting.

Default is 60 seconds.