Configure forward and return methods and adding authentication

The WCCP forwarding method determines how intercepted traffic is transmitted from the WCCP router to the WCCP cache engine. FortiProxy units use GRE forwarding.

GRE forwarding encapsulates the intercepted packet in an IP GRE header with a source IP address of the WCCP router and a destination IP address of the target WCCP cache engine. The result is a tunnel that allows the WCCP router to be multiple hops away from the WCCP cache server.

By default, the WCCP communication between the router and cache servers is unencrypted. If you are concerned about attackers sniffing the information in the WCCP stream, you can use the following command to enable hash-based authentication of the WCCP traffic. You must enable authentication on the router and the cache engines, and all must have the same password.

config system wccp

edit 1

set authentication enable

set password <password>

end

Purging specific cached content

You can purge specific cached content with the following CLI command:

execute webcache delete [pattern_type] [pattern_string]

For [pattern_type], there are three choices:

• simple—a simple string following the pattern [domain_string]:[port_string]/[path_string]
• wildcard—a wild-card match following the pattern [domain_wildcard]:[port_wildcard]/[path_wildcard]
• regexp—a Perl regular expression

To delete all cached content from www.domain.com/path:

execute webcache delete simple www.domain.com:80/path

To delete all content from .com www sites

execute webcache delete wildcard www.*.com:*/*

To verify the status of a purge request

execute webcache delete status