need configuration assistance setting up external proxy on the ASA

[Network Specialist]

Hi Everyone,

We would soon be replacing our local web filter with symantec cloud web filtering. How to configure external proxy on the ASA to point to the web server in the cloud. we want to send both http and https traffic to the cloud web server on port 3128

ASA 5540  ver 8.2

[Karsten Iwen]

That is nothing that the ASA can do for you. Or more exactly, only with newer ASA-software, it is possible for Cisco cloud security (scansafe).

What you still can do:

1) point each PC to the external proxy.

2) send all web-traffic to an internal proxy which can forward the traffic to your external proxy. For that WCCP could be used on the ASA to redirect all traffic to the internal proxy without having to reconfigure each internal client.

[Network Specialist]

Hi Karsten,

Thank you for your response!

What is the minimum IOS required to be able to set up external web proxy server on the ASA?

Would that just support cisco cloud security?

Thanks,

[jumora]

I am not sure if the customer is talking about this:

Configuring the ASA for Cisco Cloud Web Security

Cisco Cloud Web Security provides web security and web filtering services through the Software-as-a-Service (SaaS) model. Enterprises with the ASA in their network can use Cloud Web Security services without having to install additional hardware.

When Cloud Web Security is enabled on the ASA, the ASA transparently redirects selected HTTP and HTTPS traffic to the Cloud Web Security proxy servers. The Cloud Web Security proxy servers then scan the content and allow, block, or send a warning about the traffic based on the policy configured in Cisco ScanCenter to enforce acceptable use and to protect users from malware.

http://www.cisco.com/en/US/docs/security/asa/asa90/configuration/guide/protect_cloud_web_security.html#wp1581575

Or the NAT configuration that can redirect all Web and HTTPS traffic

Value our effort and rate the assistance!

[Karsten Iwen]

you need at least v9 on the ASA which is a major update from v8.2. And yes, only Cisco Cloud Web Security is supported.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni