Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Routing through Web Filter

I need to be able to route the traffic coming from both remote sites, across the PtP and VPN connections, through the web filter. Browser proxy settings will not be used. It needs to be done at the 1841 router. I'm not looking for a complete solution, just point me in the right direction.

Network layout.

  • LAN Switching and Routing

Re: Routing through Web Filter

I am assuming your traffic is going to go back out the same port the VPN comes in on ?

Option 1

Use WCCP if your web filter supports it. This makes it somewhat simpler to configure because most the configuration is done on the web proxy and it pushes rules to the router.

Option 2

Use policy based routing on both input interfaces and match any traffic that would go to the internet and set the next hop to be the web proxy. The only hard part is to get the access list to match only traffic that you want the web proxy to handle and let the rest go directly to the internet or to your internal network. All depends on how big your internal network is and the number of protocols you are going to proxy.

New Member

Re: Routing through Web Filter

Looks like you will need to use WCCP which establishes a GRE tunnel from the router to the web filter device and proxy any traffic matching your WCCP ACL.

New Member

Re: Routing through Web Filter

Actually option 2 provided by tdaris looks like it is going to work. Had busy day yesterday so I haven't fully tested it yet. It appears I'm going to have to have something on the inside of the filter to use as the next hop though. It appears that the traffic is just bouncing off the filters interface and going right back out rather than passing through and being filtered. I did a traceroute so I know it's going to the filter. I've got something I'm going to try today that may resolve this issue.

Thanks for your help guys.

This widget could not be displayed.