cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
scsslm
Level 7
Report Inappropriate Content
Message 1 of 14

McAfee SaaS Proxy server list for Region wise MCP Configuraiton

Hello All,

I need to configure the MCP policy to redirect the internet traffic respective REGION and ISP wise.

In ASIA region

India Users to use there nearest SaaS data center

In AMERS region

US Users to use there nearest SaaS data center

In EMEA region

UK Users to use there nearest SaaS data center

Please suggest the exact MCP configuration to achieve the above mentioned goal.

Thanks & Regards,

Sekar

13 Replies
jscholte
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 14

Re: McAfee SaaS Proxy server list for Region wise MCP Configuraiton

Hi Sekar,

What is the current proxy you have specified in the MCP configuration? This may change my advice depending on the answer.

If you're using cXXXXX.saasprotection.com, then the global routing manager should receive the DNS request from client and routes you to closest Web SaaS node.

All of the nodes are listed here: https://trust.mcafee.com/

If you go under Setup > DNS prefixes you could also force the users of a specific region to use a specific proxy.

This would require you to have separate policies depending on region.

Best Regards,

Jon

scsslm
Level 7
Report Inappropriate Content
Message 3 of 14

Re: McAfee SaaS Proxy server list for Region wise MCP Configuraiton

Hi Jon,

Thanks for providing the information.

I have configured three MCP policy like (for ASIA, AMERS and EMMEA)

MCP for ASIA.PNG

Access the ‘google.com’ it’s redirecting to ‘google.co.jp’ as mentioned above it will redirect to ‘google.co.in’, and I tried to ping asia.cxxxxx.saasprotection.com it’s showing ASIA region ip 208.81.65.192 as per the link.

And I tried to ping the global proxy ‘Cxxxx.mcafeesaas.com’, ‘mcafeesaas.com.geolbproxy.mxlogic.net’ and ‘wpsproxy.mcafeesaas.com’ itshowing Europe region ip 208.81.68.192

Please advice how to redirect internet traffic to respective region wise.

Regards,

Sekar

jscholte
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 4 of 14

Re: McAfee SaaS Proxy server list for Region wise MCP Configuraiton

Hi Sekar,

Can you send the output from the following commands? Feel free to redact whatever you like.

echo %date% %time%

tzutil /g

nslookup <enter>

asia.cxxxxx.saasprotection.com <enter>

set type=txt <enter>

echo.saasprotection.com <enter>

anycast.saasprotection.com <enter>

I'm mainly interested to see what the "echo.saasprotection.com" output shows, this will tell you what country the global routing manager sees you coming from.

Here is my output:

echo.saasprotection.com text =

        "Client (X.X.X.X) geo-location: US XX.XX -YY.YY"

Best Regards,

Jon

jscholte
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 5 of 14

Re: McAfee SaaS Proxy server list for Region wise MCP Configuraiton

These commands would be run on the client machine you're trying to route differently.

scsslm
Level 7
Report Inappropriate Content
Message 6 of 14

Re: McAfee SaaS Proxy server list for Region wise MCP Configuraiton

Hi Jon,

I have run the above command and result given below.

output.PNG

Regards,

Sekar

MSchneider
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 7 of 14

Re: McAfee SaaS Proxy server list for Region wise MCP Configuraiton

Sekar,

can you send me a PM with your customer SaaS customer ID please? You can see that in the MCP configuration.

We need to see if you are provisioned to the new infrastructure that is serving India.

thanks,

Michael

Michael Schneider
Senior Manager of PM
for Web Protection and UCE
(•‿•)
scsslm
Level 7
Report Inappropriate Content
Message 8 of 14

Re: McAfee SaaS Proxy server list for Region wise MCP Configuraiton

Hi Michael,

I need to check with my manager before share the SaaS customer ID.

Can you please advice how can I get the same details.

Regards,

Sekar

jscholte
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 9 of 14

Re: McAfee SaaS Proxy server list for Region wise MCP Configuraiton

Hi Sekar,

Michael is a product manager for Web Protection (MWG and SaaS), so you should be safe sharing it with him,

As far as the output goes, it looks like your DNS servers dont allow you to perform TXT lookups...

The output is supposed to show what country the routing manager perceives you as coming from, so we can understand why you're not getting routed as expected.

In any case I am not sure it matters as we'll need to get your customer ID, if you have an SR open please send that over and we can discuss it privately if that is more comfortable for you. After we've come to a conclusion we can post news back here.

Best Regards,

Jon

scsslm
Level 7
Report Inappropriate Content
Message 10 of 14

Re: McAfee SaaS Proxy server list for Region wise MCP Configuraiton

Hi Jon/Michael,

I am not here any responses can you please check and update the status.

Regards,

Sekar

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community