supports both approaches with its IronPort S-series appliance. Using Cisco's own  Web Cache Communication Protocol (WCCP) to transparently redirect traffic is one approach, assuming you have a WCCP device (such as a Cisco switch or ) to do the redirection. We started with WCCP as part of our test. However, we quickly discovered that the ASA appliance can push a proxy server to AnyConnect clients when the VPN tunnel is established, and this was a cleaner and more interoperable solution on all our test platforms.

in Network World's Wide Area Network section.