Cisco Web Security Appliance

How do I confirm that WSA is able to make outbound connections?

Document ID: 117986

Updated: Jul 17, 2014

Contributed by Kei Ozaki and Siddharth Rajpathak, Cisco TAC Engineers.



How do I confirm that WSA is able to make outbound connections?

You can use the telnet command to test connections from your WSA to the Internet.

  1. Log in to your appliance via SSH.
  2. Once logged in, you need to confirm your setup. Type ipconfig and check how many interfaces you have enabled. If you only have the "Management" interface enabled, then the sourcing interface would be your "Management" interface. If you have multiple interfaces enabled, you need to know the interface closest to your default gateway of your "Data Traffic."
  3. Log in to your appliance GUI via browser and choose "Network" > "Routes" to verify your routes for "Data Traffic."
  4. Once you get your source interface, type telnet from the CLI. Below are the options available for the 'telnet' command:

Please select which interface you want to telnet from.
1. Auto
2. Management (
[1]> 1

Enter the remote hostname or IP address.

Enter the remote port.
[25]> 80

Once done, you will see a prompt like this:

Connected to
Escape character is '^]'.

"Connected to" shows us that WSA was able to establish a connection to website - on port 80.

Updated: Jul 17, 2014
Document ID: 117986