WCCP on Barracuda Web Filter — IT Consulting Denver

Web Cache Communication Protocol (WCCP) was developed by Cisco for content routing.  One popular use of this is to redirect traffic on a Cisco perimeter device to a web filter such as Barracuda Web Filter 610.  Support will tell you that they always recommend the Barracuda be installed inline.  There are multiple reasons for this but here are a few: blocking https, full spyware blocking and application blocking.  Most websites are moving to https or will redirect a lot of their traffic to https.  https packets are hard to block as they are not seen because of encryption.  Barracuda will block these packets based on IP addresses since they cant see the URL request in the packet.  When the Barracuda is inline it can monitor the source and destination IP.  While they cant look inside the packet, unless ssl decryption is used, to look at the URL they use their research to block https sites.

While Barracuda will always recommend running their device inline we would like to bring some other ideas into the picture.  Running inline causes some issues at times when you deal with highly redundant networks.  NOYNIM IT Consulting Denver has multiple clients running complicated networks that have dual internet paths and multiple firewalls.  When you run the Barracuda inline you can only cover one connection.  In a firewall failover state all traffic will be lost and the network is left vulnerable.

WCCP offers a great solution for this but there are issues.  Https packets are not blocked 100% and there is still spyware that gets past the Barracuda.  There has to be some enhancements that offer highly redundant networks a way to fully monitor and filter traffic.  One popular way is to use web filters in proxy mode, whether its transparent or not.

While there are multiple ways to filter web traffic its important to consult with each client and provide the high level pros and cons for each solution.

When switching between inline and WCCP sometimes the configuration gets stuck on one mode or the other.  Sometimes you think WCCP is off or on but it really isn’t.  to make 100% sure everything is working you will need to get into the expert mode.  To access the expert mode on a barracuda do the following:

Use the Expert Variables page to set DNS variables. Click Advanced ->, add &expert=1

The Main Resource of This Blog: https://noynim.com/wccp-on-barracuda-web-filter-it-consulting-denver/


Secure Your Business with IT Managed Services Denver

Globalization has enabled the use of technology in almost all sectors. There are times when your business enterprise or consultancy firm needs the appropriate IT solutions. Managing the technical and technological aspect of your business is one of the most challenging operations to maintain a successful enterprise. Be it large or small, your business needs IT solutions now and then for security as well as technical hassles. IT solutions and help services are operating for decades, to provide you with the best technological and system security support operations.

Maximum amount of services

Denver is one the highest populated metropolitan city of Colorado. Therefore, it is an appropriate hub for all business and trade activities. Providing you with the latest security, cost effective and system maintenance technologies, IT Managed Services Denver ensure that you get the best for your business. Highly specialized services offer you with proactive and top class IT solutions for maintenance of your entire business set up. You can choose from a range of customized security systems, reduce the total cost of ownership and maximize the usage of technology. Securing important credentials and data is also possible with the help of these services.

Efficient after support

The services you seek should be cost effective. IT Managed Services Denver provides you with online help desk, offering monitoring of your systems 24×7 technological assistance. In addition to the facility above, it also provides you with highly advanced support system that updates your software whenever there is an update in technology. Available at all times of the day, they are indeed the best service provider for your business.

The Main Resource of This Blog: http://denvernoynim.blogspot.com/2015/04/secure-your-business-with-it-managed.html