Transparent web proxy for browsing traffic only

Could you please tell us the use case? 

You could easily setup a authentication rule on top, with all your AD Authentication Users, without Proxy and a LAN to WAN Rule below this with Proxy enabled.

But you wont get the "User-Agent" Flag, this is currently not in XG right now (https://en.wikipedia.org/wiki/User_agent)

Hello,

Thank you for the feedback.
Currently the proxy in transparent mode is used. This is a problem for many business applications that use HTTPS or 443. Too many exceptions and big difficulties in defining them.

To avoid blocking users, the idea is that, at first, only Internet browsing is HTTP/S scanned.

I try using the direct mode in the browser configuration but without success.
I need help to know exactly how to configure Sophos XG Please.

Hi,

sounds like you haven't installed the XG CA on the PCs.

Ian

Hi,

sounds like you haven't installed the XG CA on the PCs.

Ian

Hello,

Yes needed certificates are installed and browsing works in transparent mode.

Best regards

Hello,

After configuring a WPAD.dat file for allowing automatic configuration of browsers, I added the following rule at the top of the list:

Source zones: LAN
Source networks: Any
Destination zones: WAN
Destination networks: #Port9.157 which is the inside interface
Services: Proxy-TCP-8080 which is the web proxy port configured in section Web > General Settings > Web proxy configuration

Enabled the HTTP/S scan as follow

and applied a Web policy.

In this way, only the HTTP/S sessions coming from the browsers are scanned and the other cases are addressed by the standard outgoing authorization rule.