RE: Question on web proxy architecture

["Paul Melson" <pmelson () gmail com>]

-----Original Message-----
Subject: RE: [fw-wiz] Question on web proxy architecture


> The AV is a separate entity on the same subnet
>
> The AV is forwarded all uncached content from the proxy via the ICAP
protocol.
> As i understand it, the AV just responds to the proxy not the client.

This sounds like a pretty flexible solution.  If both proxies are
single-homed, the web proxy can suffer performance problems since it will
handle each request and response 2 or 3 times on a single interface.  If
it's 100TX and the Internet connection is a 1.5Mbps T1, it won't be a
problem, but you get the idea.

PaulM



_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards