Cisco Cisco Web Security Appliance S360 Guía De Información

Contributed by Kei Ozaki and Siddharth Rajpathak, Cisco TAC
Engineers.

Jul 17, 2014

How do I confirm that WSA is able to make outbound connections?

You can use the telnet command to test connections from your WSA to the Internet.

Log in to your appliance via SSH.

1. 

Once logged in, you need to confirm your setup. Type ipconfig and check how many interfaces you
have enabled. If you only have the "Management" interface enabled, then the sourcing interface
would be your "Management" interface. If you have multiple interfaces enabled, you need to know
the interface closest to your default gateway of your "Data Traffic."

2. 

Log in to your appliance GUI via browser and choose "Network" > "Routes" to verify your routes for
"Data Traffic."

3. 

Once you get your source interface, type telnet from the CLI. Below are the options available for the
'telnet' command:

4. 

Please select which interface you want to telnet from.
1. Auto
2. Management (192.168.1.100/24: wsa.example.com)
[1]> 1

Enter the remote hostname or IP address.
[]> www.example.com

Enter the remote port.
[25]> 80

Once done, you will see a prompt like this:

Trying 192.168.1.50...
Connected to www.example.com.
Escape character is '^]'.

"Connected to" shows us that WSA was able to establish a connection to website − www.example.com on
port 80.