Cisco Web Caching Solution

Hi There,
I need a high availability web caching solution for 500 users, preferential with proxy funcionality.
Cisco had the Cisco Web Caching Engine, but it is End-of-Sales already. The new product that will replace the EOS product, is Wide Area Application Engine (WAE) plataforms. Is that right?
The Cisco Global Price List has a SKU product SE512-IPROXY-K9 (Security / iProxy WAE-512 bundle, 1GB MEM, 1 250GB HDD Incl.).
The question are:
The SKU product SE512-IPROXY-K9 is the right product for my needs?
What is the difference between the SKU SE512-IPROXY-K9 and the SKU WAE-512-K9?
Regards,
Pedro Vasques

Hi Pedro,
The WAE product line does WAN Optimization which includes HTTP optimization. The WAN Optimization solution works between two WAEs (one being at a Branch office and the other being at Data Center ). When employees at branch office tries to access resources like Servers at Data Center their TCP based traffic gets optimized. For more info pl go to http://www.cisco.com/go/waas
Cisco's Web Caching was a different solution. It caches the web objects when first user goes to a given web site. The following user requests will be served locally as long as cache history is available for that web page.
I suggest you contact either a Cisco partner or Cisco representative in your area.
thanks
Nat

Similar Messages

Ask the Expert:Cisco Web Security

With Ryan Wager
Welcome to the Cisco Support Community Ask the Expert conversation. This is an opportunity to learn about design, configuration and troubleshooting of the Cisco Web Security Solutions including Cisco Ironport WSA and Cisco ScanSafe with Cisco experts Kiran Sirupa and Ryan Wager. Kiran Sirupa is a technical marketing engineer in the product marketing team for the Cisco IronPort Web Security Appliance product line. He also works on documentation, partner ,and system engineering training. Kiran has been working in the Cisco Security Technologies group for more than six years. Ryan Wager is a technical marketing engineer at Cisco in the product management team for the ScanSafe Web Security platform. He is heavily involved with the product's integration with the Cisco Integrated Services Router Generation 2 platform, along with documentation, training, and testing of all new products and features. Before joining the product management team, Wagner spent two years as an implementation engineer helping ScanSafe's largest customers implement the platform into their networks.
Remember to use the rating system to let Kiran and Ryan know if you have received an adequate response.
They might not be able to answer each question due to the volume expected during this event. Remember that you can continue the conversation on the Security sub-community, discussion forum shortly after the event. This event lasts through October 7, 2011.. Visit this forum often to view responses to your questions and the questions of other community members.

Yes, the IronPort WSA will support all the security functions including Anti-Virus, Anti-Malware, Anti-Spyware, Web Reputation when working in conjunction with an existing proxy.
There are two conditions:
1. WSA acts as an upstream proxy - In this case, the authentication will be handled by your existing proxy, but the WSA is the first layer of defense. The WSA will perform a lookup in its web reputation database based on the destination. Also, The WSA can scan the http response with Anti-Virus, Anti-SpyWare and Anti-Malware software. However, since the WSA doesn't have user authentication information, you can only apply global controls for Acceptable Use.
2. WSA has to go through an existing upstream proxy - In this case, the WSA has all the security functionality. In addition, it also handles the authentication. Hence, you can apply role based controls.
You may refer to the following links for more information:
WSA Product Literature: http://www.cisco.com/en/US/products/ps10164/prod_literature.html
Cisco Security Reports: http://www.cisco.com/en/US/prod/vpndevc/annual_security_report.html
Cisco Security Intelligence Operations: http://tools.cisco.com/security/center/home.x

Cisco Conetent 566 Solution

A client wants a Caching solution for their GPRS network. We want to propose Content Engine 566. The Clients requirements are;
a) Support Transparent Proxy
b) Support for HTTP, FTP, Gophers and SOCKS
c) Support for Secure Connection (Transparent HTTPS)
d) Caching of DNS look up
e) Provide HTTP Compression
f) Integrated Web Content Filtering
g) Extensive Access Control
h) Cluster Solution
Does the 566 support all these feature (esp. e, c, h)?

Cisco ACNS Software Datasheet ,
http://www.cisco.com/en/US/products/sw/conntsw/ps491/products_data_sheet0900aecd80261a22.html

Wccp web-cache -- can't get it working

I installed a Squid based caching appliance, by Stratacache. it supports GRE wccp redirect in transparent mode, I have it configured as wccpv2 using the Router's LAN ip address 10.250.1.2.
Every time I turn on the caching for a host (or the entire LAN) the internet breaks for whomever I turn wccp on. I have tried disabling CEF and have moved the cache to it's own router interface.
Topology of the Cisco 2801-SEC-K9 router, running 12.4(22)T advsecurity
FastE 0/0 (10.250.1.1) ---> connected directly to cache server
FastE0/1 (10.23.1.1) ---> Connected to internal LAN
MultiLink1 (12.x.x.98) ---> 4 T1 multilink to AT&T Internet Service
so here is my config,
ip wccp web-cache redirect-list 46 group-list 40 password webcache
ip wccp version 2
access-list 40 permit 10.250.1.2 (cache server)
access-list 46 permit 10.23.1.21 (test host for wccp)
interface fastethernet0/1
ip wccp web-cache redirect in
here is the output from the router
Roosevelt-2801(config)#do sh ip wccp web-cache view
    WCCP Routers Informed of:
        12.x.x.98
    WCCP Clients Visible:
        10.250.1.2
    WCCP Clients NOT Visible:
        -none-
Roosevelt-2801(config)#do sh ip wccp web-cache det
WCCP Client information:
        WCCP Client ID:          10.250.1.2
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Initial Hash Info:       00000000000000000000000000000000
                                 00000000000000000000000000000000
        Assigned Hash Info:      FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
        Hash Allotment:          256 (100.00%)
        Packets s/w Redirected: 914
        Connect Time:            1d18h
        Bypassed Packets
          Process:               0
          CEF:                   0
          Errors:                0
Roosevelt-2801(config)#do sh ip wccp web
Global WCCP information:
    Router information:
        Router Identifier:                   12.x.x.98
        Protocol Version:                    2.0
    Service Identifier: web-cache
        Number of Service Group Clients:     1
        Number of Service Group Routers:     1
        Total Packets s/w Redirected:        7800
          Process:                           94
          CEF:                               7706
        Service mode:                        Open
        Service Access-list:                 -none-
        Total Packets Dropped Closed:        0
        Redirect Access-list:                46
        Total Packets Denied Redirect:       8195426
        Total Packets Unassigned:            0
        Group Access-list:                   40
        Total Messages Denied to Group:      14
        Total Authentication failures:       8
        Total Bypassed Packets Received:     0
So I can see the packets redirected, the cache never sees them, the router and cache can ping each other, the cache and LAN clients can ping each other - am I missing something?

so I found the problem... hopefully this helps somebody else in the future... the problem is the redirected packets were sourced from the router multilink1 interface IP address and the cache was expecting them from the router fa0/0 interface, so it dropped them.
also the cache has a "spoof client IP" option that was on, because we prefer to do this for netflow, but, I don't think client-IP-spoofing works with the standard web-cache wccp service. It was causing internet problems so I turned the spoofing off and it works fine...
hope this helps

Warning System spameater Unable to connect to Cisco Web Security Service.; URL Filter...

My C670 ESA's have been throwing these alerts intermittently for the past few days, anyone else seeing them?
The Warning message is:
Unable to connect to Cisco Web Security Service.
URL Filtering will not work correctly.
Please verify all network, proxy and firewall settings.
Connection to "v2.sds.cisco.com" failed.
The last error seen on this connection: "Request failed with code: 28 (Connection time-out)"
Version: 8.5.6-092
Looks like it is open on port 443 and currently up. Hitting it with a browser gives me:
https://v2.sds.cisco.com/
After an error or two they go away and appear OK.
Checking the logs I don't see a way to verify URL lookups are working, is there a way?
Also, I setup URL filtering six months ago and had it set to only trigger on (-10)-(-9.5) and saw about an 80% false positive. It has improved over the past six months drastically but still catching mostly advertising URLs and allowing all phishing URLs right through. I've yet to see it block a phishing URL.
Jason

After lots of trial and error, I was able to eliminate this problem. What I wound up doing is defining the XE service again in the listener.ora file:
SID_LIST_LISTENER =
(SID_LIST =
    (SID_DESC =
      (SID_NAME = XE)
      (ORACLE_HOME = C:\ProgramData\oraclexe\app\oracle\product\11.2.0\server)
I know that typically you should not have to do this, especially since I already had defined DEFAULT_SERIVCE_LISTENER = (XE) at the bottom of the listener.ora file. Explicitly defining the XE service in the listener.ora file allows the listener to find it while the system is running under the Cisco AnyConnect VPN. The only hiccup I found by doing this is that the XE service is discovered twice by the listener when the system is NOT running under the Cisco AnyConnect VPN. It still works OK. The listener just seems to ignore the repeated definition of the XE service (see output below):
C:\ProgramData\oraclexe\app\oracle\product\11.2.0\server\bin>lsnrctl service
LSNRCTL for 32-bit Windows: Version 11.2.0.2.0 - Production on 13-JUN-2013 10:03:15
.......(omitted output).......
Service "XE" has 2 instance(s).
Instance "XE", status UNKNOWN, has 1 handler(s) for this service...
    Handler(s):
      "DEDICATED" established:0 refused:0
         LOCAL SERVER
Instance "xe", status READY, has 1 handler(s) for this service...
    Handler(s):
      "DEDICATED" established:0 refused:0 state:ready
         LOCAL SERVER
Service "XEXDB" has 1 instance(s).
Instance "xe", status READY, has 1 handler(s) for this service...
    Handler(s):
      "D000" established:0 refused:0 current:0 max:1022 state:ready
         DISPATCHER <machine: DEV-M-137GF, pid: 5544>
(ADDRESS=(PROTOCOL=tcp)(HOST=DEV-M-137GF.paychex.com)(PORT=58257))
The command completed successfully
If anyone has a cleaner solution for this problem, please let me know. Otherwise, I am moving forward with what I did.
Thanks.....Paul

Oracle Web Cache and OBIEE 11g

Anyone using Oracle Web Cache with OBIEE 11g?
Can I get an insight into whether this solution is beneficial? Or I shouldn't even bother.

No iam not using oracle web cache
Can I get an insight into whether this solution is beneficial? Or I shouldn't even bother.I dont have idea about it,but i think its not beneficial ,anyways there is OBIEE cache that is more than sufficient.
hope answered your question.
Cheers,
KK

Using Web Cache to Load balance Forms Server application.

Hello,
I apologize for cross posting this question in the Forms and Caching Services forum. But I thought my question will have a better chance.
I have read that it's possible to use Oracle Web Cache as a software load balancer between multiple Application Servers.
We are running Oracle9iAS R1.0.2.2.2a, with Forms/Reports6i servers on 2 Win2k boxes i.e our Forms6i application is deployed on two seperate boxes in two distinct locations. Users at each location, use their respective App Server url.
Since the application is the same i.e. Forms6i code/fmx is the same for both locations, I am looking into loadbalancing and failover capability that Web Cache might be able to provide.
I AM ONLY LOOKING AT THE LOADBALANCING & FAILOVER capabilities and NOT caching.
So basically all users from both locations will point their browser to this Web Cache and the Web Cache will direct each connection to either of the two boxes. So, if either of the boxes dies, Web Cache will divert the requests to the other box.
My concern is whether Web Cache supports this for the Forms requests that it will receive from the users. We are using Servlet Deployment of Forms, so technically, all communication is going though the HTTPD.
Has anyone done this or has any ideas as to whether it's going to work or not? Oracle's FAQ insists that Forms is not supported. But I want to make sure that even loadbalancing is not supported. And if not supported then is there any other solution.
Any comments appreciated.
Thanks,
Manish

Using Web Cache to load balance servlet-based Forms (6i and 9i) is unofficially supported. I say "unofficially" because we have actual customers doing it and getting support, but the 2 development teams (Forms and Web Cache) haven't actually done any integration testing of this sort of configuration yet. For your case, please contact your Support rep and ask what was done to use Web Cache as a load balancer for Forms6i at METRO in Germany. The Forms product managemment team is writing up a white paper to describe how to do it, but until then, you'll need to go through Support. Please contact me if you want more information.

Load Balancing Forms and Reports with Web Cache

We are planning to add a second OracleAS 10g middle-tier application server to an existing 10g middle-tier.
Both middle tiers will provide Forms and Reports.
Users must pass through two static HTML pages before starting Forms.
We plan to use Web Cache to load-balance (probably using round-robin) between the two middle-tiers.
Does anyone see any problems with this solution?
All comments/suggestions welcome.
Thanks,
Jim

You could also load balance the two OC4J's using standard servlet mechanisms. I know that there exists a couple of good notes on Metalink. Go and do a search.
Regards,
Martin Malmstrom

Update Portal with new Web Cache location

Hi!
We are trying to move our front-end WebCache to a new server. The Web Cache seems to work allright, but I can't get Portal to access the Web Cache.
After moving the Web Cache I've updated the Portal Web Cache Settings in IAS console's portal:portal instance. OC4J_Portal and portal:portal are running and are not showing any errors in IAS console. When I try to access Web Cache through Portal administrative page i get an error saying WWC-40019 "Could not open web cache connection". The URL Portal uses to access Web Cache admin page i.e. is wrong.
I need some help finding the appropriate way to configure Portal with the new Web cache addresses.
Thank you!
Best regards
"Heyers"

Portal PM, I thought you said that this solution would not work. Everyone I have heard so far has said that you cannot configure webcache to work with Portal documents. Does this work or does it not?
Read the messages below from the bottom up.
It's not possible to do that today.
In 9.0.2 (the next release) we will be using WebCache configured out of the box so you won;t need to, however, till then you cannot use webcache with Portal 3.0.x
Thanks
Portal PM
Title : re:Oracle Portal with Oracle Web Cache O/S : N/A POST: REPLY (W/QUOTE)
Author : Agus Jaelani Type : Question
Date : Feb 4, 2002 23:11 PT
please try using this configuration on http.conf
Port <webcache port>
Listen <apache listen port>
ServerName <webcache hostname>
you must running ssodatan script again.
Note :
this config only make portal work together with webcache.
Title : re:Oracle Portal with Oracle Web Cache O/S : N/A POST: REPLY (W/QUOTE)
Author : Krzysztof Jungowski Type : Question
Date : Feb 5, 2002 06:58 PT
Thanks a lot. It works.
best regards
Krzysztof Jungowski

Getting Error while installing oracle web cache

Hi all,
after installation of Oracle 9i Application Server version 1.0.2.2.2 on Windows 2000(NT based), while installing oracle web cache on AS following error appears after 96% of installation. Origin oracle database 10g is running on a separate PC in local network.
Updating User List
Adding users to the cache
Adding users to the cache failed.
Reason: WTE-03501 Error updating list of users:
Export failed on origin database.
OCI error - ORA-28595: Extproc agent : Invalid DLL Path
ORA-06512: at "SYS.WTCSYS", line 3
ORA-06512: at "SYS.WTCSYS", line 66
ORA-06512: at line 1
can anyone please solve this problem.
thanks.
regards.
fahad ejaz
email:[email protected]

Hi Fahad,
I am sorry I am not sure what the solution to your issue is. However, I was wondering why you are not attempting to install Oracle 10g as opposed to 1.0.2.2.2?
I am guessng here but perhaps the 10g database is incompatible with a 1.0.2.2.2 install.
Hopefully someone else may be able to provide more useful feedback.
cheers
Nick

Getting Error while installing oracle web cach

Hi all,
after installation of Oracle 9i Application Server version 1.0.2.2.2 on Windows 2000(NT based), while installing oracle web cache on AS following error appears after 96% of installation. Origin oracle database 10g is running on a separate PC in local network.
Updating User List
Adding users to the cache
Adding users to the cache failed.
Reason: WTE-03501 Error updating list of users:
Export failed on origin database.
OCI error - ORA-28595: Extproc agent : Invalid DLL Path
ORA-06512: at "SYS.WTCSYS", line 3
ORA-06512: at "SYS.WTCSYS", line 66
ORA-06512: at line 1
can anyone please solve this problem.
thanks.
regards.
fahad ejaz
email:[email protected]

Hi Fahad,
I am sorry I am not sure what the solution to your issue is. However, I was wondering why you are not attempting to install Oracle 10g as opposed to 1.0.2.2.2?
I am guessng here but perhaps the 10g database is incompatible with a 1.0.2.2.2 install.
Hopefully someone else may be able to provide more useful feedback.
cheers
Nick

Oracle Portal with Oracle Web Cache

How can I configure Oracle Portal (or Web Cache) to work together?
I have installed and started both of them. Now, Web Cache works fine with standard html pages (for example Apache docs) but after trying to reach portal the url is redirected to standard port - on which Portal runs (Web Cache works on 1100 and Portal on 7778).
So it seems that portal pages are not cached.
Web Cache:
Application Web Servers:
hpwin 7778 100 30 5 / 10
Where can I find any information about that?
best regards
KJ

Portal PM, I thought you said that this solution would not work. Everyone I have heard so far has said that you cannot configure webcache to work with Portal documents. Does this work or does it not?
Read the messages below from the bottom up.
It's not possible to do that today.
In 9.0.2 (the next release) we will be using WebCache configured out of the box so you won;t need to, however, till then you cannot use webcache with Portal 3.0.x
Thanks
Portal PM
Title : re:Oracle Portal with Oracle Web Cache O/S : N/A POST: REPLY (W/QUOTE)
Author : Agus Jaelani Type : Question
Date : Feb 4, 2002 23:11 PT
please try using this configuration on http.conf
Port <webcache port>
Listen <apache listen port>
ServerName <webcache hostname>
you must running ssodatan script again.
Note :
this config only make portal work together with webcache.
Title : re:Oracle Portal with Oracle Web Cache O/S : N/A POST: REPLY (W/QUOTE)
Author : Krzysztof Jungowski Type : Question
Date : Feb 5, 2002 06:58 PT
Thanks a lot. It works.
best regards
Krzysztof Jungowski

Web caching

I need some help here with this CE-510 A box frankly I haven't worked on it.
My customer has asked for Web caching three sites eg. http://support.cisco.com and given me an IP address xx.xx.xx.xx.
Any document that someone could point out to would be great. If sample configurations are available it would be even better.
I am also attaching current config.
All users are accessing web through a proxy server.
-Hoogen
Thanx in advance

I need some help here with this CE-510 A box frankly I haven't worked on it.
My customer has asked for Web caching three sites eg. http://support.cisco.com and given me an IP address xx.xx.xx.xx.
Any document that someone could point out to would be great. If sample configurations are available it would be even better.
I am also attaching current config.
All users are accessing web through a proxy server.
-Hoogen
Thanx in advance

No response from web cache server

Hello,
I have OCS installed on linux box. when i am trying to connect to web conferencing home page through winodws, after connectivity check when i click on login, it is showing me error as "NO response from webcache serve".
For webconferencing on linux i have run following scripts ./dcmctl, ./imtctl and ./webcachectl it is showing me as webcached server is running.
what more i have to do for getting the access to webserver?
can anyone help me please?
Regards,
Sarita

In the OAS Release 2 Web Cache Admin guide, you''ll find that the solution related to that particular error is to increase the network timeout between the web cache and the origin server. Change it in Resource Limits and Timeouts page of the ASControl.
However, with all the internal errors that you are also getting, the problem is likely something else so increasing the timeout value might only mean it'll take longer before it tells you there's an error.

Only 'web-cache' gets redirected - no other service groups...

I have a Netcache configured for transparent caching for port 80 and 443. The Netcahce IP is 164.72.49.253. We have a 6509, sup720 IOS. 12.2(17a)SX3, configured to redirect web-cache and 1 to the Netcache. Here is the config:
ip wccp web-cache
ip wccp 1
The 6509 interface that controls the subnet the netcache is on is configured thus:
interface Vlan1
ip address 164.72.49.131 255.255.255.128
ip wccp web-cache redirect out
ip wccp 1 redirect out
We have a PC on another subnet connected to the 6509 that we are using to test the config, and we can only get port 80 to be redirected to the Netchace. HTTPS port 443 never gets redirected. Service group 1 is configed on the Netcache as tcp port 443.
Here is the output of 'sh ip wccp':
ENGLAB-6513-Native#sh ip wccp
Global WCCP information:
Router information:
Router Identifier: 164.72.232.1
Protocol Version: 2.0
Service Identifier: web-cache
Number of Cache Engines: 1
Number of routers: 1
Total Packets Redirected: 3431
Redirect access-list: -none-
Total Packets Denied Redirect: 0
Total Packets Unassigned: 0
Group access-list: -none-
Total Messages Denied to Group: 0
Total Authentication failures: 0
Service Identifier: 1
Number of Cache Engines: 1
Number of routers: 1
Total Packets Redirected: 0
Redirect access-list: -none-
Total Packets Denied Redirect: 0
Total Packets Unassigned: 0
Group access-list: -none-
Total Messages Denied to Group: 0
Total Authentication failures: 0
ENGLAB-6513-Native#sh ip wccp 1 detail
WCCP Cache-Engine information:
Web Cache ID: 164.72.49.253
Protocol Version: 2.0
State: Usable
Redirection: GRE
Packet Return: GRE
Assignment: HASH
Initial Hash Info: 00000000000000000000000000000000
00000000000000000000000000000000
Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Hash Allotment: 256 (100.00%)
Packets Redirected: 0
Connect Time: 00:33:23
ENGLAB-6513-Native#sh ip wccp web-cache detail
WCCP Cache-Engine information:
Web Cache ID: 164.72.49.253
Protocol Version: 2.0
State: Usable
Redirection: GRE
Packet Return: GRE
Assignment: HASH
Initial Hash Info: 00000000000000000000000000000000
00000000000000000000000000000000
Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Hash Allotment: 256 (100.00%)
Packets Redirected: 2911
Connect Time: 23:37:29
What would cause the router to no redirect service-group 1 packets to the Netcache?

The sup720 does not support wccp yet.
The commands are available and some functionalities may work but currently the sup720 does not support wccp.
http://www.cisco.com/en/US/products/hw/switches/ps708/prod_bulletin09186a00801599bc.html
Regards,
Gilles.

Cisco Web Caching Solution

Similar Messages

Maybe you are looking for