Your organization has subscribed to the Cisco Cloud Web Security (CWS) service. You
have been assigned the task of configuring the CWS connector on the ISR-G2 router at a
branch office. Details of the configuration requirements include:
. Content scanning should be enabled for traffic outbound from FastEthernet0/1
. Explicitly specify 8080 for both the http and the https ports
. The primary CWS proxy server is proxy-a.scansafe.net
. The secondary CWS proxy server is proxy-b.scansafe.net
. The unencrypted license key is 0123456789abcdef
. If the CWS proxy servers are not available. web traffic from the branch office should be
denied
. After configuration. use show commands to verify connectivity with the CWS service
and scan activity You can access the console of the ISR at the branch office using the icon
on the topology display. The enable password is Cisco!23
With Firepower Threat Defense, which two interface settings are required when
configuring a routed interface? (Choose two.)
A.
Speed
B.
Duplex
C.
Media Type
D.
Redundant Interface
E.
EtherChannel
CWS connector configuration for ISR-G2:
parameter-map type content-scan global
server scansafe primary name proxy-a.scansafe.net port http 8080 https 8080
server scansafe secondary name proxy-b.scansafe.net port http 8080 https 8080
license 0 0123456789abcdef
server scansafe on-failure block-all
!
interface fa0/1
content-scan out
!on some IOS-es the above command might be:
cws out
source interface fa0/1 under parameter-map type content-scan global is missing
Diagram shows the outside interface as fa0/1. Therefore, shouldn’t the source interface be OTHER that fa0/1? When doing CWS, you are not sourcing the traffic from the outside interface, but rather from the inside interface. Therefore, I think that the source interface command should be: source interface fa0/0 (if the diagram shows inside interface to be fa0/0)