Cisco Cisco Web Security Appliance S360 Guide D’Information

Contributed by Josh Wolfer and Siddharth Rajpathak, Cisco TAC
Engineers.

Oct 10, 2014

How do I read or interpret the WCCP logs on Cisco Web Security appliance?

Cisco Web Security Appliance (WSA), all versions of AsyncOS

In AsyncOS version 7.1 and below: WCCP messages are logged in the Proxy Logs.

In AsynOS version 7.5 and above: WCCP messages is seen in WCCP logs along with the proxy logs.

Check your "Log Subscriptions" (under GUI  >  System Administration  > Log Subscriptions) to make sure
the proxy and/or WCCP logs are enabled.

In AsyncOS version 7.1 and below: The WCCP logging level can be changed by entering the following CLI
command:

wsa01> advancedproxyconfig
[]> wccp

Enter values for the various "wccp" options:

Enter the log level for debugging WCCP :
[0]> 3

On AsyncOS version 7.5 and above: The logging level for WCCP logs and/or proxy logs can be changed in
GUI under "System Administration  > Log Subscriptions  >  <Corresponding−WCCP−Log−Name>"

The logging levels will show the following data&colon;

7.1 log level
(CLI)

Critical

Errors