Internet - ASA FW (4 SVI's) - Layer 3 - 2*6509 HSRP - MPLS ROUTER - 15 remote sites
Today I have 3 central internet pops within my network all using ASA firewalls, the firewalls each have 15 MPLS locations that receive internet. Currently I have WCCPV2 running on the firewall at each of these locations. The firewalls have 4 interfaces, today we can only monitor 1 of them "LAN side" due to the limitation of the ASA. I am getting ready to start a project to move WCCP off of the LAN side interface of the firewall onto our core 6509's.
Questions 1 - Where is the best placement of the WCCP process given the network layout? I was thinking on the Layer 3 interface between the core 6509's and the ASA. Thoughts? I have also seen design recommendations that say to put the WCCP configuration on the SVI's on the 6509's however, this doesn't cover the 15 sites coming from MPLS.
Question 2 - What is the best practice for monitoring multiple interfaces on the ASA firewall? Is there a different design method I should consider that would allow me to monitor those interfaces as well? Let me know if haven't provided enough detail. Thanks, Danny