Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

WAAS WCCP from fortinet

hello,

I need your help, we want to configure WCCP on WAE but the customer have a fortinet  firewall in agencies.

Has anyone had to do this type of setup ?

what are the  WCCP services 61 and 62? did I need to configure also to Fortinet?

Thanks for your help.

Everyone's tags (3)
1 REPLY
Cisco Employee

WAAS WCCP from fortinet

Hi Fatoumata,

The WCCP service is a number specified in the protocol to define what kind of traffic is going to be matched, so, it's not relevant for a firewall.

To allow WCCP traffic to go through a firewall (assuming it's located between the WAE and the router), you just need to allow UDP port 2048 in both directions.

If what you need to do is allowing the optimized traffic to go through the FW (which would happen if you have the FW between the router and the WAN link), then, you would need to enable some kind of WAAS inspection on the Fortinet firewall to allow the modifications that WAAS does on the TCP packets (adding a TCP option in the SYN and SYN/ACK packets and a sequence number shift after the TCP handshake). Unfortunately, I don't know how this can be done because I'm not familiar with that firewall.

Regards

Daniel

1073
Views
0
Helpful
1
Replies