Layer 4 Switching or WCCP for Ironport Web Filter Deployment

NPT_2 · ‎06-22-2009

We are in the process of implimenting Cisco's Ironport S160 appliance for web filtering. I have a choice between integrating via WCCP at our PIX firewall, or on a layer 4 switch. We do have a 6509 in our core with a SUP1a MSFC1 PFC1.

Can we go the layer 4 route on the 6509? Do I have all I need for that? If so would there be an advantage going that route? The documentation seems very vague on the layer 4 configuration, it basically says set the Ironport device to Layer 4 mode and that's it.

What do you think?

Edison Ortiz · ‎06-22-2009

Supervisor 1a won't support WCCP, please refer to the documentation on WCCP support on the 6500:

http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SXF/native/configuration/guide/wccp.html

You are left with only the PIX as an option.

HTH,

__

Edison.

NPT_2 · ‎06-23-2009

I actually wasn't refering to WCCP Support for the Pix, but for Layer 4 integration support on the 6509 (instead of WCCP on the Pix) as the documentation is really vague about the differances between the two options and how you would configure Layer 4 integration.