nanog mailing list archives

Re: Cisco ScanSafe, aka Cisco Cloud Web Security


From: Scott Voll <svoll.voip () gmail com>
Date: Thu, 5 Dec 2013 12:05:05 -0800

We currently use CCWS (previously ScanSafe) with the Anyconnect client.
 Nice solution.  Whether your in the office or remoting from a Starbucks,
the traffic is always proxied.  We went with the solution because of a
couple reasons:

1. with multiple egress points on the corporate network, we didn't want to
be down if we lost a proxy server.

2. corporate laptops whether in the office or at Starbucks would still be
proxied.  This helps limit our virus and malware infections.  and provides
HR reports.

3 split tunneling would be an option because the traffic doesn't have to
come back to your internal proxy.

4. our remote home office bandwidth is very limited, so using the cloud it
provided for better use of that bandwidth.

all and all it's a good solution.  I'm not going to tell you that we have
not had any issues, but with any new solution, there will be a couple
bruises along the way.

YMMV

Scott



On Wed, Dec 4, 2013 at 7:53 AM, Herro91 <herro91 () gmail com> wrote:

Hi,

I'm doing some research on the Cisco Cloud Web Security offering, also
known as ScanSafe.

Has anyone on the lists explored Cisco's ScanSafe SaaS offering, now called
Cisco Cloud Web Security - as a means of providing protection in the cloud
that would potentially negate the requirement to have a full tunnel (i.e.
allow split tunneling) for teleworkers?


Thanks!



Current thread: