Cisco 300-725 SWSA case studies
Cisco 300-725 SWSA · Put your knowledge to work in context.
The Cisco 300-725 SWSA exam is the concentration exam for the Cisco Certified Specialist – Web Security credential and one of the qualifying exams toward CCNP Security. It validates hands-on skill with the Cisco Secure Web Appliance (formerly Web Security Appliance), the on-premises proxy that inspects and controls outbound web traffic. The Cisco 300-725 SWSA case studies are 5 cases and about 4,314 words.
1Two data centers, one stretched HA pair: designing WSA placement for 5,200 users
Northwind Health has 5,200 employees across two data centers: DC-A in Dallas and DC-B in Raleigh. All web traffic is currently sent by a PAC file to an active/standby pair of WSA S390s in DC-A running AsyncOS 14.0.
872 words, about 4 min2WCCP shows two caches, but a new floor and all HTTPS bypass the proxy
Vantage Retail runs 260 stores, each with an ISR 4331 redirecting guest and back-office traffic by WCCPv2 service group 0 (web-cache) to a regional pair of WSAs in transparent mode. At the regional data center the core is a pair of Catalyst 9500s running VRRP.
874 words, about 4 min3NTLM works for Windows, but macOS, Linux and a guest VLAN fail authentication
Meridian University has 18,000 students and staff in two Active Directory forests. Browsers use a PAC file pointing to an explicit-proxy WSA pair for most of campus.
838 words, about 4 min4Library kiosks, an AUP nobody can audit, and ransomware that beaconed for eleven days
City of Lakes has 3,000 staff, 1,200 shared library kiosks that all log in with one shared "kiosk" AD account, and public Wi-Fi used by about 5,000 patrons a day. Staff use an explicit proxy; kiosks and patrons are redirected transparently.
874 words, about 4 min5Decryption coverage, an ICAP DLP blind spot, and a failed backup after upgrade
Halcyon Financial has 4,000 users and 85 percent HTTPS. A WSA pair performs decryption with a self-signed CA distributed only to Windows machines by GPO; 900 macOS and iOS devices are enrolled in MDM but the certificate was never pushed there.
856 words, about 4 min