Transparent Proxy behind RED network

Hi,

as i know, this should work.

Which RED Mode do you use? 

And which zone is this red network? Do you have a own firewall policy for this network with http/s scanning enabled? 

Hi..

The RED is on standard/split mode, the internal lan of our HQ is defined on the split network, we created a new zone called "RED"  and created a policy  RED -->  HQ LAN, Scan HTTP/HTTPS are checked...Do I need to enabled MASQ?...

Hi..

The RED is on standard/split mode, the internal lan of our HQ is defined on the split network, we created a new zone called "RED"  and created a policy  RED -->  HQ LAN, Scan HTTP/HTTPS are checked...Do I need to enabled MASQ?...

Hi,

Standard / Split will send all HTTP/s traffic to the internet instead of the XG. 

This will cause, you will not see any HTTP/s traffic in XG proxy. 

Thanks for the info, we don't want the RED network to have a full connection to HQ, our WAN link has limited bandwidth, so I guess the other way is use a direct proxy thru their web browsers, Is there any change for a PAC/WPAD file deployment from the XG?...this feature of the UTM is very useful in some deployment scenario.

Hi Arvin ,

You may need to configure the following

Remote Side.Standard Mode not Standard/Split mode.

Local Side: Firewall rule is needed between RED and WAN and NAT is needed as XG is Internet facing.