Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 0 subscribers
  • Views 13040 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Web Appliance and WCCP

bloodborn

Hello,

This is my first time posting so I hope I am in the right place. I hope someone can give me some incite as to why we are having a huge problem with WCCP. We have about 20K PCs and 22K users in our environment we are using Sophos endpoint and just recently started using 8 Sophos Web Appliances and one Sophos Management System. We are using WCCP to keep everything in transparent mode. The devices have always lost WCCP even when in test mode. I figured since we did not have WCCP enabled for our entire network thats what was causing the problem. It seems about every hour one or two devices will suddenly give the error message "Unable to contact WCCP routers: 10.x.x.x (HTTPS service), 10.x.x.x (HTTP service)." Its not always the same devices and even when the devices have a problem the come back a few minutes later. Has anyone seen anthing like this?

:28217


This thread was automatically locked due to age.
  • 0

    Hi bloodborn,

    The web appliance will send a 'Here I am' packet to the router and expects to get an 'I see you' response back.  If it doesn't then that alert will be generated after a period of time.

    I'm afraid I don't have any simple suggestions for you, other than making sure your router firmware is up to date.

    Sophos support could show you what we see in the backend logs on your appliance.  You may need to match this up with wccp debugging to see if the router is actually receiving the 'Here I am' we send.

    Thanks,

    Tom.

    :28267
  • 0

    Thanks for the info, it may be that we need to do a firmware upgrade. Its so flaky its hard to narrow down.

    :28269
  • 0
    I had an issue with the Management appliance getting overloaded. One of the support engineer said it was an uncommon error but to increase the RAM by 20mb. Yes only 20MB, he really had to convince me that it would work since it was such a small amount. This seemed to have fixed the management appliance. I increased the RAM on the virtual web appliances also just to see if it would work. The WCCP errors stopped.
    :28401