User Guide
Table Of Contents
11
Cisco AnyConnect Secure Mobility Solution Guide
Cisco AnyConnect Secure Mobility Solution Guide
Supported Architectures
the ASA, or to a predefined static route if destined for the enterprise network. On
the WCCP router, you must still apply the command syntax
ip wccp [port]
redirect in
on the interface configured for redirection. This command enables
web traffic inbound to the interface to be redirected to the WSA. The WSA
decapsulates the GRE packet and enforces its security policies.
Like the architecture in Figure 1 on page 8, the WSA must be configured with the
appropriate route (route 10.10.10.0/8 x.x.x.x) back to the ASA in an effort to
return scanned traffic back to the AnyConnect client. The router in this case is
generally a router residing on the distribution or aggregation layer of the routing
infrastructure.