Question
How do I confirm that WSA is able to make outbound connections?
You can use the telnet command to test connections from your WSA to the Internet.
-
Log in to your appliance via SSH.
-
Once logged in, you need to confirm your setup. Type
ipconfig and check how many interfaces you have enabled. If you only have the "Management" interface enabled, then the sourcing interface would be your "Management" interface. If you have multiple interfaces enabled, you need to know the interface closest to your default gateway of your "Data Traffic."
-
Log in to your appliance GUI via browser and choose "Network" > "Routes" to verify your routes for "Data Traffic."
-
Once you get your source interface, type
telnet from the CLI. Below are the options available for the 'telnet' command:
Please select which interface you want to telnet from.
1. Auto
2. Management (192.168.1.100/24: wsa.example.com)
[1]> 1
Enter the remote hostname or IP address.
[]> www.example.com
Enter the remote port.
[25]> 80
Once done, you will see a prompt like this:
Trying 192.168.1.50...
Connected to www.example.com.
Escape character is '^]'.
"Connected to" shows us that WSA was able to establish a connection to website - www.example.com on port 80.