Cisco Cisco Web Security Appliance S690 User Guide
Chapter 3 Deployment
Deploying the Web Proxy in Explicit Forward Mode
3-6
Cisco IronPort AsyncOS 7.1 for Web User Guide
OL-23207-01
Figure 3-2
Web Security Appliance Deployment Scenario
Deploying the Web Proxy in Explicit Forward Mode
When the appliance is configured as an explicit forward proxy, client applications
must be configured to direct its traffic to the appliance. When you want to
configure the Web Proxy in explicit forward mode, you must configure the
following components:
must be configured to direct its traffic to the appliance. When you want to
configure the Web Proxy in explicit forward mode, you must configure the
following components:
•
Client applications
•
Appliance ports
Tip
If your organization needs to use explicit forward mode now, but might need
transparent mode in the future, consider deploying the Web Proxy in transparent
mode and then choosing L4 switch as the connection type. If you do not have an
L4 switch, you can connect the appliance to the network normally and the
appliance will work in explicit forward mode. When the Web Proxy is deployed
in transparent mode, it can accept both transparently redirected and explicitly
forwarded transactions. To use transparent mode in the future, you can connect the
appliance to an L4 switch and it will work in transparent mode without needing
to change the Web Proxy mode later. However, it is easy to change the deployment
mode at any time on the Security Services > Web Proxy page.
transparent mode in the future, consider deploying the Web Proxy in transparent
mode and then choosing L4 switch as the connection type. If you do not have an
L4 switch, you can connect the appliance to the network normally and the
appliance will work in explicit forward mode. When the Web Proxy is deployed
in transparent mode, it can accept both transparently redirected and explicitly
forwarded transactions. To use transparent mode in the future, you can connect the
appliance to an L4 switch and it will work in transparent mode without needing
to change the Web Proxy mode later. However, it is easy to change the deployment
mode at any time on the Security Services > Web Proxy page.