<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">14.12.2016 21:59, Yuri Voinov пишет:<br>
</div>
<blockquote
cite="mid:9ea0b311-c2c6-e894-1555-7ff501b1f335@gmail.com"
type="cite">
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">14.12.2016 21:08, Rafael Akchurin
пишет:<br>
</div>
<blockquote
cite="mid:DB6PR0401MB268040C64F44D6D67280ECF48F9A0@DB6PR0401MB2680.eurprd04.prod.outlook.com"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
p.MsoPlainText, li.MsoPlainText, div.MsoPlainText
{mso-style-priority:99;
mso-style-link:"Plain Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
p.MsoListParagraph, li.MsoListParagraph, div.MsoListParagraph
{mso-style-priority:34;
margin-top:0in;
margin-right:0in;
margin-bottom:0in;
margin-left:.5in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.PlainTextChar
{mso-style-name:"Plain Text Char";
mso-style-priority:99;
mso-style-link:"Plain Text";
font-family:"Calibri",sans-serif;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
/* List Definitions */
@list l0
{mso-list-id:1040131031;
mso-list-type:hybrid;
mso-list-template-ids:1597827946 67698703 67698713 67698715 67698703 67698713 67698715 67698703 67698713 67698715;}
@list l0:level1
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level2
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level3
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level4
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level5
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level6
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
@list l0:level7
{mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level8
{mso-level-number-format:alpha-lower;
mso-level-tab-stop:none;
mso-level-number-position:left;
text-indent:-.25in;}
@list l0:level9
{mso-level-number-format:roman-lower;
mso-level-tab-stop:none;
mso-level-number-position:right;
text-indent:-9.0pt;}
ol
{margin-bottom:0in;}
ul
{margin-bottom:0in;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<div class="WordSection1">
<p class="MsoNormal">Hello everyone,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">After pulling all my hair out and reading
every possible howto on the Internet for Cisco ASA
integration with Squid using WCCP I have decided to write my
own. The how to is at <a moz-do-not-send="true"
href="https://docs.diladele.com/tutorials/web_filter_https_squid_cisco_wccp/index.html">https://docs.diladele.com/tutorials/web_filter_https_squid_cisco_wccp/index.html</a>.
Please note it is aimed at those with minimal admin skills
and contains every single step thoroughly described (mostly
for myself not to forget anything).</p>
</div>
</blockquote>
</blockquote>
Raf, one more note. WCCP is never be easy for junior admins.
Especially with minimal admin skills. As by ASA ;) And (by my own
opinion) Squid + WCCP for any infrastructure never been simple task
and will never be simple task. ;) Warn you readers, not mislead
them, though it is a very simple task.<br>
<blockquote
cite="mid:9ea0b311-c2c6-e894-1555-7ff501b1f335@gmail.com"
type="cite">
<blockquote
cite="mid:DB6PR0401MB268040C64F44D6D67280ECF48F9A0@DB6PR0401MB2680.eurprd04.prod.outlook.com"
type="cite">
<div class="WordSection1">
<p class="MsoNormal"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">May I get your opinions/ideas if what is
written is good enough for the novice admin?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Moreover several question remain:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoListParagraph"
style="text-indent:-.25in;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span
style="mso-list:Ignore">1.<span style="font:7.0pt
"Times New Roman""> </span></span><!--[endif]-->Does
Squid perform fake CONNECT requests with SNI info instead of
raw IP like I am seeing now?<o:p></o:p></p>
<p class="MsoListParagraph"
style="text-indent:-.25in;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span
style="mso-list:Ignore">2.<span style="font:7.0pt
"Times New Roman""> </span></span><!--[endif]-->Why
HTTPS redirection only works with “wccp2_service_info 70
protocol=tcp flags=<b>dst_ip_hash</b> priority=240
ports=443” (all other flags from wccp configuration section
in squid.conf do not work).</p>
</div>
</blockquote>
Because of ASA is router. Cisco routers uses HASH as assignment
method.<br>
<blockquote
cite="mid:DB6PR0401MB268040C64F44D6D67280ECF48F9A0@DB6PR0401MB2680.eurprd04.prod.outlook.com"
type="cite">
<div class="WordSection1">
<p class="MsoListParagraph"
style="text-indent:-.25in;mso-list:l0 level1 lfo1"><o:p></o:p></p>
<p class="MsoListParagraph"
style="text-indent:-.25in;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span
style="mso-list:Ignore">3.<span style="font:7.0pt
"Times New Roman""> </span></span><!--[endif]-->How
to bypass connections from workstations to specific remote
sites by FQDN on Cisco ASA? <o:p></o:p></p>
</div>
</blockquote>
In fact this will occurs by IP anyway. Cisco devices do DNS lookup
and saves IP's in config instead of FQDN.<br>
<blockquote
cite="mid:DB6PR0401MB268040C64F44D6D67280ECF48F9A0@DB6PR0401MB2680.eurprd04.prod.outlook.com"
type="cite">
<div class="WordSection1">
<p class="MsoListParagraph"
style="text-indent:-.25in;mso-list:l0 level1 lfo1"><!--[if !supportLists]--><span
style="mso-list:Ignore">4.<span style="font:7.0pt
"Times New Roman""> </span></span><!--[endif]-->Or
maybe it is better to exclude them (3) from SSL bump on
Squid using ssl::server_name by splicing?</p>
</div>
</blockquote>
Depending your requirements.<br>
<blockquote
cite="mid:DB6PR0401MB268040C64F44D6D67280ECF48F9A0@DB6PR0401MB2680.eurprd04.prod.outlook.com"
type="cite">
<div class="WordSection1">
<p class="MsoListParagraph"
style="text-indent:-.25in;mso-list:l0 level1 lfo1"><o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks in advance for everyone who
responds.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Best regards,<o:p></o:p></p>
<p class="MsoNormal">Rafael Akchurin<o:p></o:p></p>
<p class="MsoNormal">Diladele B.V.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoPlainText">--<o:p></o:p></p>
<p class="MsoNormal">Please take a look at Web Safety - our
ICAP based web filter server for Squid proxy at <a
moz-do-not-send="true" href="https://www.diladele.com">https://www.diladele.com</a>
<o:p></o:p></p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
squid-users mailing list
<a moz-do-not-send="true" class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a>
<a moz-do-not-send="true" class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a>
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
Cats - delicious. You just do not know how to cook them.</div>
</blockquote>
<br>
<div class="moz-signature">-- <br>
Cats - delicious. You just do not know how to cook them.</div>
</body>
</html>