I need to configure the MCP policy to redirect the internet traffic respective REGION and ISP wise.
In ASIA region
India Users to use there nearest SaaS data center
In AMERS region
US Users to use there nearest SaaS data center
In EMEA region
UK Users to use there nearest SaaS data center
Please suggest the exact MCP configuration to achieve the above mentioned goal.
Thanks & Regards,
What is the current proxy you have specified in the MCP configuration? This may change my advice depending on the answer.
If you're using cXXXXX.saasprotection.com, then the global routing manager should receive the DNS request from client and routes you to closest Web SaaS node.
All of the nodes are listed here: https://trust.mcafee.com/
If you go under Setup > DNS prefixes you could also force the users of a specific region to use a specific proxy.
This would require you to have separate policies depending on region.
Thanks for providing the information.
I have configured three MCP policy like (for ASIA, AMERS and EMMEA)
Access the ‘google.com’ it’s redirecting to ‘google.co.jp’ as mentioned above it will redirect to ‘google.co.in’, and I tried to ping asia.cxxxxx.saasprotection.com it’s showing ASIA region ip 184.108.40.206 as per the link.
And I tried to ping the global proxy ‘Cxxxx.mcafeesaas.com’, ‘mcafeesaas.com.geolbproxy.mxlogic.net’ and ‘wpsproxy.mcafeesaas.com’ itshowing Europe region ip 220.127.116.11
Please advice how to redirect internet traffic to respective region wise.
Can you send the output from the following commands? Feel free to redact whatever you like.
echo %date% %time%
set type=txt <enter>
I'm mainly interested to see what the "echo.saasprotection.com" output shows, this will tell you what country the global routing manager sees you coming from.
Here is my output:
echo.saasprotection.com text =
"Client (X.X.X.X) geo-location: US XX.XX -YY.YY"
can you send me a PM with your customer SaaS customer ID please? You can see that in the MCP configuration.
We need to see if you are provisioned to the new infrastructure that is serving India.
Michael is a product manager for Web Protection (MWG and SaaS), so you should be safe sharing it with him,
As far as the output goes, it looks like your DNS servers dont allow you to perform TXT lookups...
The output is supposed to show what country the routing manager perceives you as coming from, so we can understand why you're not getting routed as expected.
In any case I am not sure it matters as we'll need to get your customer ID, if you have an SR open please send that over and we can discuss it privately if that is more comfortable for you. After we've come to a conclusion we can post news back here.