Should the Cisco Content Engines be used as a proxy appliance

Should the Cisco Content Engine be use as a proxy appliance like a Blue Coat appliance, Squid cache engine, ISA server, etc...
I am pretty sure it is but just need some feedback on past experiences. Customer would like to by a Cisco product for Web filtering/proxy.
or is it strictly used to help with web base applications.

HI,
the CE is basically able to check every request it supports. If you are using 3rd level products like smartfilter, websense or webwasher you can use the features of those products to supress/forbid certain requests(i.e MSN etc.)
Kind Regards,
Joerg

Similar Messages

Cisco Content Engine for Content Filtering

Hi All,
I am looking for a low end solution for Content Filtering and would like to use Cisco Content Engine.
1. The documentation said that Websense, Secure Computing SmartFilter (does not require separate SmartFilter) & N2H2 support is there on the CE. I used configurator on CE 510, but it did not give me option for any of those. I would appreciate any input in this regard.
2. Also, I assume that once I get a Content Engine, I don't need to use Microsoft Proxy any more, please confirm.
regards,
Ahmer Ghazi

You would have to Install the Smartfilter software on the Content engine that would work with the ACNS software running on the CE. SmartFilter software operates inside your network to control user access to external Internet resources and allows you to restrict access to World Wide Web pages, newsgroups, and FTP sites.
For more details refer:
http://www.cisco.com/univercd/cc/td/doc/product/webscale/uce/acns41/smrtfltr/sf_chap1.htm
The Content Engine does the job of storing content locally and serving it to the users, so you would not need to use the Microsoft Proxy.

Sometimes when using the Google search engine, after using the Back button in the Firefox 4.0.1 browser, I am no longer able to click in the Google search box.

Sometimes when using the Google search engine, after using the Back button in the Firefox 4.0.1 browser, I am no longer able to click in the Google search box.
This problems has been occurring on two different machines over the last two days.

I think this may not be a browser problem but rather a Google problem.
I am getting the same problem with the Google Chrome browser.

Hi all. Could anyone tell me how to Power Off & Power On the CISCO 52"LCD controls using RS232 to Play in Future

Hi,
Im working in Cisco DMS & IPTV.
Im facing a problem with 4400 DMP & 5.2.2 DMM.
I want to control the CISCO 52inch LCD's using the 4400G DMP. I am able to power off,on the LCDs remotely through the DMM. Also I am able to Schedule to power off & power on the LCD for short number of days like for 3 or 4 days.
but i cannot schedule to play in future for a month.
My requirement is as follows: I want to turn off the LCD screen during the off time in my customers office. That is I want to schedule the screen to turn ON from 7 am to 6 pm. i want to turn off my lcd screens from 6pm to 6am. i want to schedule this for 1 or 2 months long in a single shot.
kindly reply as early as possible.

Hello Peter,
I'm always eager to help as i get helped as well!
For the first part of your question: I cant see a reason why the scheduling fails for more that 4-5 days! I had it running for our customer on a daily basis without any issues.Make sure that you scheduled tasks dont conflict with other (e.gthat you may have configured when testing)
For the second part: What i did was the following: Let's consider that the working days are Mon-Friday:
So: In scheduling, i selected Monday, created two events (for LCDs on & off) and set both of them to repeat every week. I repeated this for Tuesday,Wednesday,Thursday and finally Friday. In this way, i was able to configure the dmps for the working days only.
Also, what i also added in the scheduling was an extra event ( preferably set before turning on the lcds ), an advacned task which Saves&Reboots the dmps. In this way the 4400s start fresh everyday

How often should the Cisco 6509 and 3750 switches be rebooted? Does Cisco have a best practice recommendation?

How often should the 6509's and 3750's switches be rebooted?
Does Cisco have a best practice document on this and recommendation how long the switch should be up before it gets rebooted?
Why is a reboot needed if there are no indications of issues on the log?

I'd agree with Larry here.
If you're not seeing any issues with your IOS revision and there are no relevant PSIRTs (security notices applicalble to features and or exposure of your device requiring an IOS upgrade) then you can go a very long time without rebooting, if ever.
I'm sure it's far from a record, but our corporate distribution router that supports >1000 downstream devices day in and day out has never been rebooted since installation just over 5 years ago. I have a top of rack Layer 2 switch (2900 series running CatOS) that's almost at 10 years.
That said, you should have some monitoring scheme that assures you everything is healthy. But as long as memory and cpu are happy, the device will run forever.

Certificate error on the second exchange that is used as a proxy for internet facing

Hello friends ,
I have one just like it ( http://faragesolutions.files.wordpress.com/2013/04/proxy.jpg?w=650 ) scenario . Using two Exchange , only one of them is accessed as a proxy .
In Exchange that is facing internet , I use a digital certificate with the public domain ( webmail.name.com ) and my OWA is configured to ( External: webmail.name.com ) and Internal : webmail.name.com ) .
You Exchange that are not face to internet , OWA is configured to ( External: empty) and ( Internal : servername.local ) . This Exchange user when connecting with Outlook client is generating validation error name ( servername.local ) , because as I'm using
the same Exchange certificate that is facing internet . So the audience is trying to validate the certificate name that is not registered as an alternative name.
question : the exchange that is not facing the internet, I need to use the same public certificate that is in exchange that is facing the internet? or can I just use an internal certificate?
Thank you.

The names that go on the certificate must match the names you planned when you did the CAS namespace design.
Some details here:http://blogs.technet.com/b/exchange/archive/2014/02/28/namespace-planning-in-exchange-2013.aspx
So in your case if the cert does not match the name, then this will prompt users with errors.   They need to match. As long as all your internal devices trust the issuer of the internal CA then you can use that.   Installing an
enterprise CA will automatically publish it's root CA public cert into AD so it works easily.
Cheers,
Rhoderick
Microsoft Senior Exchange PFE
Blog:
http://blogs.technet.com/rmilne
Twitter:   LinkedIn:
  Facebook:
  XING:
Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

Does the Cisco Cache Engine Work with the Cisco Local Director ?

I need to know if it is possible and how to use cisco local director to redirect traffic to the cache engine in reverse proxy configuration and transparent proxy configuration.

In directed mode, the client browsers are configured to point to a proxy to a virtual IP address on the Local Director. I know the Local Director does not support a real server that does not have a virtual address defined so it can't transparently forward like the CSS.

How much CPU should the Agent (in general) be using on an Exchange 2010 Server

Hello
Can someone please help me with the following question.
I was asked by the Exchange admin if the HealthService.exe process should be using around 10% of the CPU on a 6 core system.
First of I am note sure if the agent can use more than one core and if the % CPU as shown in Task Manager reflects all cores for a given process e.g. does 10% mean 10% across all cores or just one core.
I explained the Agent is running many workflows and instigating other tasks i.e. monitoring host and perhaps cscript etc. So it is difficult to say how much CPU is normal!
However does anyone else have an Exchange 2010 environment (I am using SCOM 2007 R2 CU6) and if so how much CPU is it using over a few minutes?
also, if there a canned report I can run which shows how much CPU the agent is using over time.
Thanks in advance
AAnotherUser__
AAnotherUser__

There are many scripts and monitoring workflows in general that run in the Exchange management pack. CPU may spike periodically while scripts are executing. However, this may be a SyncTime issue in the Exchange pack - since there are many scripts in the
pack, it would be recommended to cascade script runtime by using SyncTime configuration. I haven't taken a look at this pack in some time, so cannot comment on whether this practice was used. In general, a typical SCOM agent should not use more than 1-5% CPU
time, sustained. But, again, for heavily scripted packs like the Exchange pack, you will likely see CPU spikes regularly.
Jonathan Almquist | SCOMskills, LLC (http://scomskills.com)

How to publish the BI content in portal using Information Boardcasting ?

Hi Gurus,
I know we can broadcost the BW information using (System admin->System Config->KM Config->Content Management-->Repository Manager)
BI document repsitory
BI Meta data repository
why we need two (Document and Meta data repostory) what is the use of it?
Now my question can someone please tell me the steps to achieve this?and also tell me about the advantage and dis-advantage of doing this?
Thanks in Advance,
Dharani

Hi Dharani,
see following links for more information
[https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b0a5216a-349c-2a10-9baf-9d4797349f6a]
[http://help.sap.com/saphelp_nw04s/helpdata/en/38/3f59403db70272e10000000a155106/frameset.htm]
[http://help.sap.com/saphelp_nw04s/helpdata/en/85/905640a2f78437e10000000a155106/frameset.htm]
Best regards,
Denis

How long should the battery last in between uses?

I am just wondering how long the battery should last in between uses? I find mine really goes down FAST..I just purchased this on Sunday and charged it the right amount of time as such. The first time I used it after the initial charge I was downloading 2 music albums and just left it on and by morning the battery was drained..shouldn't it have lasted at least a few days? Its an iPod touch 16g V2.
Then lastnight I had it charged and was browing youtube and in a couple hours the battery was about 1/2 way..is this normal?
Thanks for your help!

The Touch's Wireless Internet access really chews up the battery time. When you're not using the wireless, go to Settings and turn Wireless off. When you're ready to go browsing, you can always turn it back on. If you already have a wireless access set up in your abode, the Touch will quickly "re-find" it and you'll be browsing again. If you're in a public free wireless area, you'll have to log on, etc.
If I leave wireless on all the time, my iPod Touch battery life is like halved-- sometimes more. The same holds true when viewing movies or video.
Hope this helps!
Abide.

How to copy configuration files to and from the cisco ios routers that use SNMP

Hello,
I went on the page : https://supportforums.cisco.com/docs/DOC-1860
You explain how to get a config file and send it to a tftp server or oppositely.
I face this problem:
id090365:~> snmpset -v2c -c communitystring hostipaddress .1.3.6.1.4.1.9.9.96.1.1.1.1.2.98 i 1
Error in packet.
Reason: noCreation (That table does not support row creation or that object can not ever be created)
Failed object: SNMPv2-SMI::enterprises.9.9.96.1.1.1.1.2.98
Do you have any idea?
Thanks,
Olivier

I hadn't seen any snmp guides using snmpv3 and scp as transport protocol. For those looking to implement, here is what worked for me.
As with the other snmp config copy guides you will need to download the respective MIBS and load them in the snmp.conf file.
This post will specifically cover the snmpset commands for a v3 setup.
SNMP Environment:
Name        : net-snmp
Version     : 5.7.2
Release     : 17.fc20
snmp conf file in ~/.snmp/snmp.conf
   contains
defSecurityName XXX <- replace with v3 username
defContext ""
defAuthType SHA
defPrivType AES
defSecurityLevel authPriv
defAuthPassphrase ***** <-replace with authentication pass
defPrivPassphrase ***** <-replace with encryption pass
defVersion 3
showMibErrors no
mibs ALL
I would verify basic snmpv3 functionality with a snmpwalk of something simple like sysUpTime. When that's good proceed to the CONFIG-COPY snmp commands.
This is my bash script that does the entire copy asking only for a single argument of IP/Hostname of the device being backed up. The 2>/dev/null shown in the script or at the cli below redirects STDERR to null to avoid the MIB modules parsing errors.
#!/usr/bin/bash
DEVICE=$1
RANNUM=42
USER=******
PASS=******
SERVER=X.X.X.X
DATE=$(date +"%m_%d_%y")
snmpset $DEVICE ccCopyProtocol.$RANNUM i 4 ccCopySourceFileType.$RANNUM i 4 ccCopyDestFileType.$RANNUM i 1 ccCopyServerAddress.$RANNUM a "$SERVER" ccCopyFileName.$RANNUM s "$DEVICE.$DATE" ccCopyUserName.$RANNUM s $USER ccCopyUserPassword.$RANNUM s $PASS ccCopyEntryRowStatus.$RANNUM i 4 2>/dev/null
Once run you can check the status of the copy with the following command.
[root@localhost hlsb]# snmpwalk sbs-tech-switch ciscoConfigCopyMIB 2>/dev/null
CISCO-CONFIG-COPY-MIB::ccCopyProtocol.42 = INTEGER: scp(4)
CISCO-CONFIG-COPY-MIB::ccCopySourceFileType.42 = INTEGER: runningConfig(4)
CISCO-CONFIG-COPY-MIB::ccCopyDestFileType.42 = INTEGER: networkFile(1)
CISCO-CONFIG-COPY-MIB::ccCopyServerAddress.42 = IpAddress: 10.10.10.193
CISCO-CONFIG-COPY-MIB::ccCopyFileName.42 = STRING: sbs-tech-switch.07_09_14
CISCO-CONFIG-COPY-MIB::ccCopyUserName.42 = STRING: XXXX
CISCO-CONFIG-COPY-MIB::ccCopyUserPassword.42 = STRING: XXXX
CISCO-CONFIG-COPY-MIB::ccCopyNotificationOnCompletion.42 = INTEGER: false(2)
CISCO-CONFIG-COPY-MIB::ccCopyState.42 = INTEGER: successful(3)
CISCO-CONFIG-COPY-MIB::ccCopyTimeStarted.42 = Timeticks: (52270199) 6 days, 1:11:41.99
CISCO-CONFIG-COPY-MIB::ccCopyTimeCompleted.42 = Timeticks: (52270339) 6 days, 1:11:43.39
CISCO-CONFIG-COPY-MIB::ccCopyEntryRowStatus.42 = INTEGER: active(1)
CISCO-CONFIG-COPY-MIB::ccCopyServerAddressType.42 = INTEGER: ipv4(1)
CISCO-CONFIG-COPY-MIB::ccCopyServerAddressRev1.42 = STRING: "10.10.10.193"
After the successful copy completes the entry will exist for five minutes allowing for no further requests to be made with that particular random number. To send another request prior to the five minute clearing of the table send a "destroy" snmpset to clear the entry.
[root@localhost hlse]# snmpset sbs-tech-switch CISCO-CONFIG-COPY-MIB::ccCopyEntryRowStatus.42 i 6 2>/dev/null
CISCO-CONFIG-COPY-MIB::ccCopyEntryRowStatus.42 = INTEGER: destroy(6)
Hope this will save some time for those looking to implement a more secure snmp config copy setup.
V/R
Cody Hartley

Content engine datapacket

Hi
I have a content engine ,its uses for transprancy proxy.
i have two router .one router used for lan and remote connect(wccp enable) and another router connect only for internet.
as example:
router1:203.110.153.10
content engine:203.110.153.11
internet router(inside interface): 203.110.153.12
now router1 gateway 203.110.153.12
and content engine gw:203.110.153.12
I confirure router1 that all http request redirect out to content engine.
router1,contentengine and inside interface of internet router connect same switch cisco 3550.
now problem is::
when content engine not connected then the switch port which connect router1 data transfer 3Mb input/output.
but when content engine connected ,then the switch port of content engine shows 4Mb data Input/output.
I think data transfer increase becuse content engine internal communication with router1 and also internet router.
am i right ?. or if i use transparent proxy then bandwith increase ?.
pls anyone help me ?.
thanks
biplob

Hello Biplob,
as a matter of fact, the CE is supposed to actually decrease the amount of bandwidth...
You say that data throughput goes up to 4MB, is that only right after you connect the Content Engine, or does it stay at that increased level ? In the first case, that could probably be explained by the CE starting to fill its cache. In the latter, you could try and turn on 'ip accounting' on the interface connecting router 1 to the 3550. The IP accounting data should at least tell you the source and destination of the increased traffic...
Regards,
GP

Should the Content Engine work while the Inernet link is down ?

I have installed CE590 in a client network
The http saving performance is from 30 : 40 %
My client want to make sure the CE is caching the web site
He want to shutdown Serial port of the main router , and try to browse web sites. ( the Cached sites )
Should he get a reply from the CE and browse the cached sites ??
I mean , Can the PC browser ( while the internet is link is down ) open page like www.yahoo.com for example if it is cached on the CE ??
Is there is any command of the CE that can display the name of the cahced web pages ?
Note : Cisco Content Engine Software Release 3.11
Can anyone help me ?
Thanks
Mohamed Abdallah

Mohamed,
Before you go any futher you need to upgrade the CE to ACNS 4.2.3. There are known issues with 3.1.1.
To answer your question the CE will only server content if it can not access the internet if the object is fresh. By this I mean the object has not expired or the object does not need revalidation eg If modified since request.
This could cause problems with broken pages etc etc.
Your best option is to turn on transaction logging.
transaction-logs enable
You can then go to the local1/logs directory on the CE
type working.log
This will show you the urls that clients are requesting and if they got a hit / miss/ ims hit / ims miss etc etc.
Overall your cache should always have access to the origin server for content.
Cheers
Phil

CISCO 2821 WITH CONTENT ENGINE

ANYONE KNOW THE USERNAME / PASSWORD
FOR THE CONTENT-ENGINE WHEN YOU OPEN UP A SESSION TO IT? ON OUR 2651XM'S WITH
CONTENT-ENGINES THE USERNAME IS admin
and the password is default. THIS DOES
NOT WORK WITH THE NEW CONTENT-ENGINES INSTALLED.

If you have no luck guessing passwords you can try the following.
Recovering a Lost Administrator Password
If an administrator password is forgotten, lost, or misconfigured, perform the following steps to reset the password on the device.
Note There is no way to restore a lost administrator password. You must reset the password to a new one, as described in this procedure.
Step 1 Establish a console connection to the device and open a terminal session.
Step 2 Reboot the device. While the device is rebooting, watch for the following prompt and press Enter when you see it:
Cisco ACNS boot:hit RETURN to set boot flags:0009
Step 3 When prompted to enter bootflags, enter this value:
0x8000
For example:
Available boot flags (enter the sum of the desired flags):
0x4000 - bypass nvram config
0x8000 - disable login security
[CE boot - enter bootflags]:0x8000
You have entered boot flags = 0x8000
Boot with these flags? [yes]:yes
[Display output omitted]
Setting the configuration flags to 0x8000 lets you into the system, bypassing all
security. Setting the configuration flags field to 0x4000 lets you bypass the NVRAM
configuration.
Step 4 When the device completes the boot sequence, you are prompted to enter the username to access the CLI. Enter the default administrator username (admin):
Cisco Content Engine Console
Username: admin
Step 5 Once you see the CLI prompt, set the password for the user using the username password command in global configuration mode.
The following example shows the different options and parameters for the username command. You can specify that the password be either clear text or encrypted. The user in the example chose to have an encrypted password.
ContentEngine# configure
ContentEngine(config)# username ?
WORD User name
ContentEngine(config)# username biff ?
password Specify the password for the user
privilege Set user privilege level
samba-password Set user's Windows sharing password
ContentEngine(config)# username biff password ?
0 Specifies clear-text password (default)
1 Specifies type 1 encrypted password
WORD User password (clear text)
ContentEngine(config)# username biff password 0 ?
WORD User password (encrypted)
ContentEngine(config)# username biff password 0 mypassword ?
uid User Id
ContentEngine(config)# username biff password 0 mypassword uid ?
<2001-65535> User Id
ContentEngine(config)# username biff password 0 mypassword uid 2001 ?
ContentEngine(config)#
Step 6 Use the write memory command in EXEC mode to save the configuration change.
ContentEngine(config)# exit
ContentEngine# write memory
Step 7 Optionally, reboot your device by using the reload command.
ContentEngine# reload
Rebooting is optional; however, you might want to reboot to ensure that the boot flags are reset, and to ensure that subsequent console administrator logins do not bypass the password check.
Note In ACNS software, the bootflags are reset to 0x0 on every reboot.

Smartfilter with Content Engine Module (NM-CE-BP-40G-K9) & ACNS on 3661

I've been looking over the CCO docs, but can't find one that has sample configs for using a 3661 router containing content engine module, smartfilter, & ACNS. Topology is basically the following...
(PC's)----(LAN Switch)-----(3661 w/content engine module)----(PIX)---(internet)
I don't want to creat a new IP subnet for the 3 interfaces within the content engine module/router. I want to use the IP's from the current LAN IP Block.
Any advice appreciated.

I thought this might help.
Easy NM-CE Configuration Guide!
Router IOS:c3725-ik9o3s-mz.122-15.T2
Content Engine Software: ACNS 5.0.3.5
Configure basic router configuration as normal.
Set the IP addresses for the Service Module (Content-Engine) using these commands:
interface Content-Engine2/0
ip address 10.1.1.1 255.255.255.0
ip nat inside
service-module external ip address 10.0.0.1 255.255.255.0
service-module ip address 10.1.1.2 255.255.255.0
service-module ip default-gateway 10.1.1.1
Complete Config Example (DHCP and NAT for Lab):
urrent configuration : 2440 bytes
version 12.2
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname lab3745_NM-CE
logging queue-limit 100
enable password cisco
ip subnet-zero
ip wccp web-cache
ip dhcp pool NM-ESW-16-POOL
network 10.1.2.0 255.255.255.0
domain-name cisco.com
default-router 10.1.2.1
dns-server 171.68.226.120 171.70.168.183
lease 7
ip audit notify log
ip audit po max-events 100
no voice hpi capture buffer
no voice hpi capture destination
mta receive maximum-recipients 0
interface FastEthernet0/0
ip address 172.16.12.108 255.255.255.0
ip wccp web-cache redirect out
ip nat outside
duplex auto
speed auto
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
interface FastEthernet1/0
no ip address
interface FastEthernet1/1
no ip address
interface FastEthernet1/2
no ip address
interface FastEthernet1/3
no ip address
interface FastEthernet1/4
no ip address
interface FastEthernet1/5
no ip address
interface FastEthernet1/6
no ip address
interface FastEthernet1/7
no ip address
interface FastEthernet1/8
no ip address
interface FastEthernet1/9
no ip address
interface FastEthernet1/10
no ip address
interface FastEthernet1/11
no ip address
interface FastEthernet1/12
no ip address
interface FastEthernet1/13
no ip address
interface FastEthernet1/14
no ip address
interface FastEthernet1/15
no ip address
interface Content-Engine2/0
ip address 10.1.1.1 255.255.255.0
ip nat inside
service-module external ip address 10.0.0.1 255.255.255.0
service-module ip address 10.1.1.2 255.255.255.0
service-module ip default-gateway 10.1.1.1
interface Vlan1
ip address 10.1.2.1 255.255.255.0
ip nat inside
ip local pool NM-ESW-16-POOL 10.1.2.2 10.1.2.254
ip nat pool TEST-NAT-POOL 172.16.12.108 172.16.12.108 prefix-length 24
ip nat inside source list 7 pool TEST-NAT-POOL overload
ip http server
no ip http secure-server
ip classless
ip route 0.0.0.0 0.0.0.0 172.16.12.254
access-list 7 permit 10.1.2.0 0.0.0.255
access-list 7 permit 10.1.1.0 0.0.0.255
access-list 7 permit 10.0.0.0 0.0.0.255
call rsvp-sync
mgcp profile default
dial-peer cor custom
line con 0
speed 115200
line 65
flush-at-activation
no activation-character
no exec
transport input all
line aux 0
line vty 0 4
password cisco
login
end
reset service-module 2 to reboot the Content-Engine:
service-module content-Engine 2/0 reload
Within 30 Seconds Session from the Router to the Service Module:
service-module content-engine session
Enter Basic Configuration for Network Module:
Password, etc
Configure The service Modeule using the command line interface:
hostname NM-CE-BP
ip domain-name CISCO.COM
interface FastEthernet 0/0
ip address 10.0.0.1 255.255.255.0
exit
interface FastEthernet 0/1
ip address 10.1.1.2 255.255.255.0
exit
ip default-gateway 10.1.1.1
primary-interface FastEthernet 0/1
ip name-server 172.72.1.1
wccp router-list 1 172.16.12.108
wccp web-cache router-list-num 1
wccp version 2
username xxx password xxxx
username xxxx privilege 15
authentication login local enable primary
authentication configuration local enable primary
NM-CE-BP#exit
You can use the command line interface to show statics from the Content Engine by using the show statistics screen command or use your web browers for a more graphical report.

Should the Cisco Content Engines be used as a proxy appliance

Similar Messages

Maybe you are looking for