Cisco Cisco Web Security Appliance S670 Mode D'Emploi

One route configuration section for all traffic (split routing enabled). When you use the 
Management interface for both management and data traffic (“Restrict M1 port” is disabled), then 
this page includes one section to enter routes for all traffic that leaves the Web Security appliance, 
both management and data traffic.

A route gateway must reside on the same subnet as the Management or Data interface on which it is 
configured. If multiple data ports are enabled, the web proxy sends out transactions on the data interface 
that is on the same network as the default gateway configured for data traffic.

To enable split routing of management and data traffic, see 

Choose Network > Routes. 

Click on Default Route in the Management or Data table as required (or the combined 
Management/Data table if split routing is not enabled).

In the Gateway column, enter the IP address of the computer system on the next hop of the network 
connected to the network interface you are editing.

Submit and commit your changes.

Choose Network > Routes.

Click the Add Route button corresponding to the interface for which you are creating the route. 

Enter a Name, Destination Network, and Gateway.

Submit and commit your changes.

Choose Network > Routes.

To save a route table, click Save Route Table and specify where to save the file. 

To load a saved route table, click Load Route Table, navigate to the file, open it, and submit and 
commit your changes.

When the destination address is on the same subnet as one of the physical network interfaces, AsyncOS 
sends data using the network interface with the same subnet. It does not consult the routing tables.