ASA + Squid

Dec 06, 2006 4 Replies
ASA + Squid open original image

Hello,



It is possible to use ASA 5510 with squid? ASA have web filtering but only with Websence or n2h2.



I'd like fwd. whole traffic from LAN (on inside interface) to squid on server in DMZ.



On *BSD making transparent proxy is easy but on ASA it is possible?



Thank you for any help.



Best regards Arek



Trendmicro content filtering module is avaible for web traffic filtering (external module) with Cisco ASA (Cisco ASA 5500 Series CSC-SSM)

datasheet of CSC-SSM :

formatting link

or

If u are going to use squid,there is no need of squid placed on DMZ zone.You may place the squid server on inside interface (LAN) made as transarent proxy & download dansguardian for content filtering.

Cheers..

Mano

Arek wrote:

I believe it's as simple as creating a rule to set the next hop for all web traffic as the squid box.

and disallow all port 80 traffic not coming from the squid server.

I've done this in the past with PIXs but don't know the similarities/differences to ASAs.

m.

Arek wrote:

Thank you for this link. I check this solution.

Regards Arek

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required