[squid-users] Hardware placement

I've been digging around for an answer on this and am trying to figure out the best layout for attempting a WCCP2/Squid transparent proxy.

I've done several installs of Cisco WCCP2 using Bluecoat's proxy, but this would be a much cheaper method.

The hardware layout of Bluecoat was like the following (the way I did it before):

USER Workstation
        |
        |
    Cisco--------------Bluecoat(WCCP)---------Win2k3 DC
        |
        |
        |
   Internet

The HTTP packet was transferred to the Cisco which was then forwarded to Bluecoat for validation.

The configurations I seem to be finding on the net for SQUID/WCCP are like the following:

User Workstation
        |
        |
    Cisco
        |
        |------------Win2k3(LDAP)
        |
Bluecoat(WCCP)
        |(nat)
        |
        |
   Internet

What I'm trying to accomplish is that only my SQUID server can talk to my AD environment.  It's a weird situation in that this is a "public" network that is still being authenticated to our private side.  In other words, our students are going to be bringing in their computers but we don't want them to touch our private network in any form.

Can anyone make any recommendations/suggestions?

Thanks much.
  Scott
Received on Fri Sep 26 2008 - 12:38:04 MDT