Virtual Secure Web Gateway

hi everyone,

Please guide me im Setting a SWG,

here a scenario:

1. 2 firewall (active-active)

2. 2 core switch with balancing

3. over all 7000 user nation wide for head office arround 3-4k internet user

4. 1 SWG 8490 (already purchase)

5. connection of firewall and core switch are all in fiber cable connection

challenges:

Existing of URL filtering: cisco ironport will replace by SWG

requirement of client : fiber connection also and has a URL content filtering.

Since, SWG has no fiber connection for inline, we will try do as a proxy. 

question:

a. whos IP addres will be input on the browser setting? LAN/WAN IP or the Management Server?

b. where to plug the UTP cable  in part of the SWITCH for the from  SWG LAN/WAN port  to core switch (port)?

c. what would be the adjustment in network ie core switch/firewall ? as proxy or tap

thanks

You would be better served by span/tap mode for that many users. Proxy is more resource intensive and requires changes to the workstation.