Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 619
 
3-6
Cisco IronPort AsyncOS 7.7.5 for Web User Guide
Chapter 3      Deployment
Connecting the Appliance to a WCCP Router
Note
When the Web Proxy is configured in transparent mode, you must enable the HTTPS Proxy if the 
appliance receives HTTPS traffic. When the HTTPS Proxy is disabled, the Web Proxy passes through 
explicit HTTPS connections and it drops transparently redirected HTTPS requests. The access logs 
contain the CONNECT requests for explicit HTTPS connections, but no entries exist for dropped 
transparently redirected HTTPS requests. 
Connecting Appliance Interfaces
When you configure the Web Proxy in transparent mode, you can connect the P1 port or both the P1 and 
P2 ports to an Layer 4 switch or WCCP router using an Ethernet cable. For more information about how 
to connect the data interfaces (P1 and P2), see 
Connecting the Appliance to a WCCP Router
When you connect the appliance to a WCCP router, you must perform the following tasks: 
1.
You must create at least one WCCP service on the appliance. For more information, see 
2.
After you create a WCCP service, you must configure the router to work with the Web Security 
appliance. For more information, see 
.
You can also connect an appliance to multiple WCCP routers. For more information, see 
.
Configuring the Web Security Appliance
A WCCP service is an appliance configuration that defines a service group to a WCCP v2 router. It 
includes information such as the service ID and ports used. Service groups allow a web proxy to establish 
connectivity with a WCCP router and to handle redirected traffic from the router.
Create WCCP services on the Network > Transparent Redirection page. The WCCP services you create 
determine how you configure the WCCP routers. For more information about creating WCCP services, 
see 
Note
You can enable the standard service (also known as the “web-cache” service) during system setup, and 
you can configure different or additional WCCP service groups after you run the System Setup Wizard.
Configuring the WCCP Router
After you create at least one WCCP service in the Web Security appliance, you can configure the WCCP 
router(s) in the network.