Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)

need configuration assistance setting up external proxy on the ASA

Hi Everyone,

We would soon be replacing our local web filter with symantec cloud web filtering. How to configure external proxy on the ASA to point to the web server in the cloud. we want to send both http and https traffic to the cloud web server on port 3128

ASA 5540  ver 8.2

4 REPLIES
VIP Purple

need configuration assistance setting up external proxy on the A

That is nothing that the ASA can do for you. Or more exactly, only with newer ASA-software, it is possible for Cisco cloud security (scansafe).

What you still can do:

1) point each PC to the external proxy.

2) send all web-traffic to an internal proxy which can forward the traffic to your external proxy. For that WCCP could be used on the ASA to redirect all traffic to the internal proxy without having to reconfigure each internal client.

need configuration assistance setting up external proxy on the A

Hi Karsten,

Thank you for your response!

What is the minimum IOS required to be able to set up external web proxy server on the ASA?

Would that just support cisco cloud security?

Thanks,

Silver

need configuration assistance setting up external proxy on the A

I am not sure if the customer is talking about this:

Configuring the ASA for Cisco Cloud Web Security

Cisco Cloud Web Security provides web security and web filtering services through the Software-as-a-Service (SaaS) model. Enterprises with the ASA in their network can use Cloud Web Security services without having to install additional hardware.

When Cloud Web Security is enabled on the ASA, the ASA transparently redirects selected HTTP and HTTPS traffic to the Cloud Web Security proxy servers. The Cloud Web Security proxy servers then scan the content and allow, block, or send a warning about the traffic based on the policy configured in Cisco ScanCenter to enforce acceptable use and to protect users from malware.

http://www.cisco.com/en/US/docs/security/asa/asa90/configuration/guide/protect_cloud_web_security.html#wp1581575

Or the NAT configuration that can redirect all Web and HTTPS traffic

Value our effort and rate the assistance!

Value our effort and rate the assistance!
VIP Purple

Re: need configuration assistance setting up external proxy on t

you need at least v9 on the ASA which is a major update from v8.2. And yes, only Cisco Cloud Web Security is supported.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

443
Views
0
Helpful
4
Replies
CreatePlease to create content