Guest

Cisco Web Security Appliance

How do I confirm that WSA is able to make outbound connections?

Document ID: 117986

Updated: Jul 17, 2014

Contributed by Kei Ozaki and Siddharth Rajpathak, Cisco TAC Engineers.

   Print

Question

How do I confirm that WSA is able to make outbound connections?

You can use the telnet command to test connections from your WSA to the Internet.

  1. Log in to your appliance via SSH.
  2. Once logged in, you need to confirm your setup. Type ipconfig and check how many interfaces you have enabled. If you only have the "Management" interface enabled, then the sourcing interface would be your "Management" interface. If you have multiple interfaces enabled, you need to know the interface closest to your default gateway of your "Data Traffic."
  3. Log in to your appliance GUI via browser and choose "Network" > "Routes" to verify your routes for "Data Traffic."
  4. Once you get your source interface, type telnet from the CLI. Below are the options available for the 'telnet' command:

Please select which interface you want to telnet from.
1. Auto
2. Management (192.168.1.100/24: wsa.example.com)
[1]> 1

Enter the remote hostname or IP address.
[]>
www.example.com

Enter the remote port.
[25]> 80

Once done, you will see a prompt like this:

Trying 192.168.1.50...
Connected to
www.example.com.
Escape character is '^]'.

"Connected to" shows us that WSA was able to establish a connection to website - www.example.com on port 80.

Updated: Jul 17, 2014
Document ID: 117986