cut-through proxy authentication and wccp

Unanswered Question
Apr 15th, 2008

I'm designing a Security solution for a customer.

I'm going to put an ASA Appliance and I will need to authenticate and authorize users. Additionally I will use WCCP with a transparent proxy.

I have some doubts:

What takes precedence first, WCCP or AAA authentication commands?

If I enable WCCP, will the authentication still work?

Thank you!

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
ebreniz Mon, 04/21/2008 - 11:36

I am thinking of authenticating the users with username and password prior to establishing connections over the ASA. I think this can be done somehow with the cut-trough proxy feature. Unfortunately i have no ACS Server available so the cut-through approach is not possible. No doubt If you enable WCCP, it not will work.

fermendo Tue, 09/27/2011 - 23:24


Here is part of ASA 8.4 CLI config guide, you can find it on:

WCCP Interaction With Other Features

In the ASA implementation of WCCP, the protocol interacts with other configurable features according

to the following:

Cut-through proxy will not work in combination with WCCP.

Hope this helps


This Discussion