Virtual Secure Web Gateway

Hello,

  We have a hardware appliance and are running 5.0.1.1 code.  I have two actually, one in each of my data centers with internet connections, but they are deployed the same way.  It is currently configured as in-line mode.  Due to various reasons I won't bore you with, this product has been dropped in my lap with not much more than an IP address to connect to (I don't even have the login info yet.).

We are doing a tech refresh/redesign of our internet edge deployment and I have quite a bit of consternation over this device since it apparently needs to be in-line at layer 1 to do its job.  I understand the fail-open NICs and how they operate in a general sense as I've dealt with other devices like WAN accelerators from Citrix with the same type of functionality.

I’d like to use WCCP to put it logically in-inline but that doesn’t seem to be an option?  Any idea if that feature will be available very soon or is it now and I overlooked it?  One reason is that I intend to use all fiber connections and I won’t be able to place this thing in-line any more.  If I could use WCCP I could find a place to connect it much more easily.  Also, there will be a total of 4 paths from the inside of my firewalls into my LAN so that would pose a problem as well.

I’m not one to drop threats usually, but if I can’t find a way to fit this device into my design then I’ll have to find another product.  I really (really) don’t want to do this as I don’t have time to demo and test new filtering devices.  I’m already prepared and budgeted to buy another SWG appliance for each data center, but not if it can’t meet my deployment needs.

Is WCCP an option now or will it be soon?  Soon means before the end of this year.

Thanks.

Hi,

as of 5.0.1 (current version), SWG is not WCCP capable. I'll check with the right people so you get asnwers to the rest of your questions.

Regards,

Federico 

Hi owilson, unfortunately it's looking like WCCP support will most likely not make it into our next major product release and it now looks like we probably won't see WCCP support until 2013.  It's probably worth pointing out that you could run in proxy mode as you'd like to, the big problem be you won't have that abiliity to make things completely transparent as you'd like by using WCCP.

Kevin