Re: Destination policy NAT on ASA 8.2 to Symantec proxy on

Yes, WCCP is pre-nat. I'm not sure how to set this up without a private tunnel
to the filtering site. Cisco CloudSafe works on certain platforms, but it's
more Netflow type based than WCCP.

If a L2L is possible, the incoming packets would be transparently redirected
via WCCP or forwarded (depending upon your setup) back to the inside to your
L2L router, and then encrypted out to the destination.

Having never used an outsourced type solution like this, nor understanding the
setup or your requirements, I'm afraid I'm at the end of this road without
more details.

Regards,
Jay McMickle CCIE #35355
Sent from my iPhone

On Apr 17, 2013, at 8:37 AM, Tauseef Khan <tasneemjan_at_googlemail.com> wrote:

> Thanks Jay, the traffic has to be natted first on external interface to be
routed on the internet Does WCCP not bypass NAT?
> regards
>
> Kind regards
>
> Tauseef
> mobile: +44 7837209187
>
>
> On 17 April 2013 14:15, Jay McMickle <jay.mcmickle_at_yahoo.com> wrote:
>> What transparent forwarding protocol is supported by Symantec? Cisco ASA
supports WCCP redirect for the respective protocol (http, https, ftp, etc.),
but I don't know that I would send that over the Internet. What about a VPN
tunnel to them and send WCCP to them?
>>
>> Regards,
>> Jay McMickle CCIE #35355
>> Sent from my iPhone
>>
>> On Apr 17, 2013, at 8:10 AM, Tauseef Khan <tasneemjan_at_googlemail.com>
wrote:
>>
>> > Hi all, Appreciate if some one could take a look. I have ASA 8.2 with
>> > nating as below
>> > nat (inside) 1 access-list NAT_ALL
>> > global (outside) 1 interface OUTSIDE
>> > accees-list NAT_ALL permit any any
>> >
>> > So all traffic going to outside is natted behind the OUTSIDE interface.
I
>> > have a requirement that all traffic going to internet (OUTSIDE
interface)
>> > should be forwarded to a transparent proxy (symantec managed service).
>> > I know this is achievable on 8.4 and 9.0 but is there anyway I can do
this
>> > on ASA8.2
>> > Thanks in advance
>> >
>> > Kind regards
>> >
>> > Tauseef
>> > mobile: +44 7837209187
>> >
>> >
>> > Blogs and organic groups at http://www.ccie.net
>> >
>> > _______________________________________________________________________
>> > Subscription information may be found at:
>> > http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Wed Apr 17 2013 - 08:43:43 ART