Cisco Cisco Web Security Appliance S190 Guía Del Usuario
3-7
Cisco IronPort AsyncOS 7.0 for Web User Guide
OL-23079-01
Chapter 3 Deployment
Deploying the Web Proxy in Transparent Mode
Configuring Client Applications
You must configure all client applications, such as web browsers and FTP clients,
used on the network to point to the Web Proxy. You can configure each client in
the following ways:
used on the network to point to the Web Proxy. You can configure each client in
the following ways:
•
Manual. Configure each client application to point the appliance Web Proxy
by specifying the appliance hostname or IP address and the port number, such
as 3128, used for listening to data traffic.
by specifying the appliance hostname or IP address and the port number, such
as 3128, used for listening to data traffic.
•
Automatic. Configure each client application to use a PAC file to detect the
appliance Web Proxy automatically. Then you can edit the PAC file to specify
the appliance Web Proxy information. PAC files work with web browsers
only. For more information, see
appliance Web Proxy automatically. Then you can edit the PAC file to specify
the appliance Web Proxy information. PAC files work with web browsers
only. For more information, see
Connecting Appliance Interfaces
You can connect the P1 interface or both the P1 and P2 interfaces to a network
switch using an Ethernet cable. You do not need special hardware, such as a
particular switch or router. For more information about how to connect the data
interfaces (P1 and P2), see
switch using an Ethernet cable. You do not need special hardware, such as a
particular switch or router. For more information about how to connect the data
interfaces (P1 and P2), see
Testing an Explicit Forward Configuration
If you want to test an explicit forward proxy configuration, you can separate and
forward traffic from a subset of your network infrastructure. To individually test
this configuration, clients can forward traffic to the appliance from one web
browser and connect to the Internet using another web browser. This method also
ensures an alternate path to the Internet while testing.
forward traffic from a subset of your network infrastructure. To individually test
this configuration, clients can forward traffic to the appliance from one web
browser and connect to the Internet using another web browser. This method also
ensures an alternate path to the Internet while testing.
Deploying the Web Proxy in Transparent Mode
When the appliance is configured as a transparent proxy, client applications are
not aware that their traffic gets redirected to the appliance, and they do not need
to be configured to point to the appliance. To deploy the appliance in this mode,
you need one of the following types of hardware to transparently redirect web
traffic to the appliance:
not aware that their traffic gets redirected to the appliance, and they do not need
to be configured to point to the appliance. To deploy the appliance in this mode,
you need one of the following types of hardware to transparently redirect web
traffic to the appliance: