ASA WCCP multipkle service groups same interface

scott-goodwin · ‎10-22-2009

Hi Guys,

I am trying to configure WCCP as I have 3 DMZ off my firewall each containing a cache engine for each particular network segment, i.e london, berlin, paris.

I only have 1 inside interface and I want to redirect clients based on src ip to which ever cache engine belongs to there network segment. i.e belrin subnets goto berlin chache engine dmz.

Is this possible

Scott

Kureli Sankar · ‎10-26-2009

You are saying that the clients are on the inside and the cache engines are on the DMZ?

Pls. check the WCCP requirement:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/dhcp.html#wp1094628

WCCP redirect is supported only on the ingress of an interface. The only topology that the security appliance supports is when client and cache engine are behind the same interface of the security appliance and the cache engine can directly communicate with the client without going through the security appliance.