300-725 · Question #53
A network administrator noticed that all traffic that is redirected to the Cisco WSA from the Cisco ASA firewall cannot get to the internet in a Transparent proxy environment using WCCP. Which trouble
The correct answer is C. Check WCCP logs in debugs mode to check there are no pending HIA or ISY requests.. In a WCCP (Web Cache Communication Protocol) transparent deployment, the WSA and the redirecting device (ASA in this case) exchange control messages. 'HIA' (Here I Am) messages are sent by the WSA to announce itself, and 'ISY' (I See You) messages are sent back by the router/fire
Question
A network administrator noticed that all traffic that is redirected to the Cisco WSA from the Cisco ASA firewall cannot get to the internet in a Transparent proxy environment using WCCP. Which troubleshooting actions can be taken on the CLI to make sure WCCP communication is not falling?
Options
- APing the WCCP device.
- BDisable WCCP to see if the WCCP service is causing the issue.
- CCheck WCCP logs in debugs mode to check there are no pending HIA or ISY requests.
- DExplicitly point the browser to the proxy.
How the community answered
(30 responses)- A3% (1)
- B3% (1)
- C83% (25)
- D10% (3)
Explanation
In a WCCP (Web Cache Communication Protocol) transparent deployment, the WSA and the redirecting device (ASA in this case) exchange control messages. 'HIA' (Here I Am) messages are sent by the WSA to announce itself, and 'ISY' (I See You) messages are sent back by the router/firewall to acknowledge the WSA. Checking WCCP logs in debug mode on the CLI lets the administrator verify whether these handshake messages are being sent and acknowledged, which confirms whether WCCP communication is functioning. Option A (ping) tests basic connectivity but not WCCP-specific communication. Option B (disabling WCCP) would confirm the issue but doesn't troubleshoot it. Option D applies to explicit proxy setups, not transparent ones.
Topics
Community Discussion
No community discussion yet for this question.