Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 0 subscribers
  • Views 6564 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WCCP and Reporting

Redspecial2000

Hi,

we are considering using WCCP for web traffic on a Cisco guest wireless network passing through our Sophos Web Appliance. We currently have one management box and two proxies configured for explicit mode against AD.

What I'd like to know is:

1. Can we still use the same management box to provide filtering policies to a third box running in transparent mode?

2. What level of reporting is available on users passing through the box whilst in transparent mode?

It's all a bit hypothetical at the moment!

Thanks for any help!

:15409


This thread was automatically locked due to age.
  • 0

    Hello Redspecial2000,

    I'll attempt to answer this with the information given.  There are a few unknowns, so it may be best to review this with Support to make sure all options have been covered.

    1. Can we still use the same management box to provide filtering policies to a third box running in transparent mode?

    Yes.  Since you are using AD, you may need to create custom groups based on the IP range of the guest network to include them seperately in policy delegation.  I am assuming since you want the new SWA in transparent mode, you don't want them authenticating to AD with say, a guest account.

    2. What level of reporting is available on users passing through the box whilst in transparent mode?

    The reporting will be by IP only as opposed to AD credentials (again depending on whether or not they are using AD guest login accounts).

    Hope this helps a bit!

    MarkJD.

    :15459
  • 0

    Thanks Mark,

    it's a good start for us!

    It's an issue when you've got a Radius/NPS authenticating with a Controller against guest credentials passed from an AD! We don't want to Proxy PAC file their devices, so transparent with WCCP is our only sensible option. Unforntuantely it looks as though we cant filter and report against the username they provide to the controller.

    Thanks

    :15479
Unfiltered HTML