Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 1 answer
  • Subscribers 28 subscribers
  • Views 5204 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Transparent Proxy behind RED network

Arvin Carlos

Hi,

 

Is it possible for the transparent proxy to work behind the RED network?...on our LAN side it is working using STAS SSO, but on the RED side even with STAS SSO is working well, I cannot make  it work...please help.



This thread was automatically locked due to age.
Parents
  • 0

    Hi,

    as i know, this should work.

    Which RED Mode do you use? 

    And which zone is this red network? Do you have a own firewall policy for this network with http/s scanning enabled? 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    Hi..

     

    The RED is on standard/split mode, the internal lan of our HQ is defined on the split network, we created a new zone called "RED"  and created a policy  RED -->  HQ LAN, Scan HTTP/HTTPS are checked...Do I need to enabled MASQ?...

  • 0 in reply to Arvin Carlos

    Hi,

    Standard / Split will send all HTTP/s traffic to the internet instead of the XG. 

    This will cause, you will not see any HTTP/s traffic in XG proxy. 

    __________________________________________________________________________________________________________________

Reply
  • 0 in reply to Arvin Carlos

    Hi,

    Standard / Split will send all HTTP/s traffic to the internet instead of the XG. 

    This will cause, you will not see any HTTP/s traffic in XG proxy. 

    __________________________________________________________________________________________________________________

Children
  • 0 in reply to LuCar Toni

    Thanks for the info, we don't want the RED network to have a full connection to HQ, our WAN link has limited bandwidth, so I guess the other way is use a direct proxy thru their web browsers, Is there any change for a PAC/WPAD file deployment from the XG?...this feature of the UTM is very useful in some deployment scenario.

Cookie Information Banner