Wireless Access

last person joined: 12 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Wirless Machines not getting Intercepted by Bluecoat web proxy

This thread has been viewed 0 times

  • 1.  Wirless Machines not getting Intercepted by Bluecoat web proxy

    Posted Dec 04, 2012 04:48 AM

    Hi,

     

    I have multiple vlans configued on the Aruba Wireless controller.

     

    The aruba connectes to the core switch, then Bluecoat (which is in trasparent interception mode) and Finally Firewall.

     

    When i put the proxy settings in wirelss machines, the packets are gtting intercpted without any issues.

     

    But wihout proxy ip, wehn I ACCESS internet, the packets are not being seen by the bluecoat.

    Ideally all the internet traffic passes thru proxy which is inline.

     

    When I check the Firewall, I see the source mac address as Aruba's mac.

     

     

    Any ideas why the traffic not hit the bluecoat.Also why I am seeing aruba mac address if it passes thru core switch.

     

     

     

     

     

     

     

     



  • 2.  RE: Wirless Machines not getting Intercepted by Bluecoat web proxy

    EMPLOYEE
    Posted Dec 04, 2012 06:24 AM

    That is probably because you have source-nat on that VLAN.  It is Natting all the traffic by the Aruba controller.  Uncheck source-nat on the VLAN interface.

     



  • 3.  RE: Wirless Machines not getting Intercepted by Bluecoat web proxy

    Posted Dec 05, 2012 01:35 AM

    Are you using Captive Portal Authentication



  • 4.  RE: Wirless Machines not getting Intercepted by Bluecoat web proxy

    Posted Dec 06, 2012 03:06 AM

    I dont think source natting is the issue..

    Because I see the original source ip address inthe Firewall



  • 5.  RE: Wirless Machines not getting Intercepted by Bluecoat web proxy

    EMPLOYEE
    Posted Dec 06, 2012 04:19 AM

    Do a wired packet capture.