Question of WFilter deployment with proxy server

[superman]

We plan to deploy WFilter on existing Proxy server. The logs are directed to another SQL server within our network. Can we generate daily reports from another PC installed with WFilter, instead of directly from the proxy server? This is to reduce the processing load on the Proxy server. If possible, must we purchase 2 licenses, instead of 1?

[gengw2000]

This deployment can work, but you need two licenses for both WFilter to work.

I would recommend another solution:

1. Install WFilter in another server together with the sql server.

2. Mirror the proxy server's traffic to the WFilter server. You can setup a mirroring port in your switch to do this.



In this deployment, wfilter will not have any influence on your proxy server, and you only need to install one wfilter program. You may check this document: http://www.imfirewall.us/help/doc/deploy_cisco2950.htm