Cisco Cisco Web Security Appliance S370 Guía Del Usuario
3-10
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 3 Deployment
Using the Web Security Appliance in an Existing Proxy Environment
Figure 3-5
Example WCCP Service — Dynamic Service, Password Required
In this example, the WCCP service defines a dynamic service group with service ID of 120. The
redirection basis is on the destination port, and it has enabled a password for this service group of
“admin99” (hidden in the appliance configuration). Also suppose in this example that you want to
configure the ethernet0 interface on the router for this service group.
redirection basis is on the destination port, and it has enabled a password for this service group of
“admin99” (hidden in the appliance configuration). Also suppose in this example that you want to
configure the ethernet0 interface on the router for this service group.
Use the following WCCP configuration for this example:
Working with Multiple Appliances and Routers
When you connect one or more Web Security appliances to one or more WCCP routers, you have a
cluster. You can include up to 32 appliances and up to 32 routers in a cluster. You must configure all
appliances and routers in a cluster to communicate with each other.
cluster. You can include up to 32 appliances and up to 32 routers in a cluster. You must configure all
appliances and routers in a cluster to communicate with each other.
Using the Web Security Appliance in an Existing Proxy
Environment
Environment
The Web Security appliance is a proxy-compatible device, and is easily deployed within an existing
proxy environment. However, it is recommended that you place the appliance downstream from existing
proxy servers, meaning closer to the clients.
proxy environment. However, it is recommended that you place the appliance downstream from existing
proxy servers, meaning closer to the clients.
ip wccp version 2
ip wccp 120
interface ethernet0
ip wccp 120 redirect in
ip wccp 120 password admin99