[squid-users] Hardware placement

I've been digging around for an answer on this and am trying to figure out the best layout for attempting a WCCP2/Squid transparent proxy.

I've done several installs of Cisco WCCP2 using Bluecoat's proxy, but this would be a much cheaper method.

The hardware layout of Bluecoat was like the following (the way I did it before):

USER Workstation
������� |
������� |
��� Cisco--------------Bluecoat(WCCP)---------Win2k3 DC
������ �|
������� |
������� |
�� Internet

The HTTP packet was transferred to the Cisco which was then forwarded to Bluecoat for validation.

The configurations I seem to be finding on the net for SQUID/WCCP are like the following:

User Workstation
������� |
������� |
��� Cisco
������� |
������� |------------Win2k3(LDAP)
������� |
Bluecoat(WCCP)
������ �|(nat)
������� |
������� |
�� Internet

What I'm trying to accomplish is that only my SQUID server can talk to my AD environment.� It's a weird situation in that this is a "public" network that is still being authenticated to our private side.� In other words, our students are going to be bringing in their computers but we don't want them to touch our private network in any form.

Can anyone make any recommendations/suggestions?

Thanks much.
� Scott
Received on Fri Sep 26 2008 - 12:38:04 MDT