Web Proxy vs DPI

Question

hi, if in firewall rule i use DPI instead of web proxy then if user configure proxy in his browser then that will also go through DPI or via web proxy??? please advise.

LuCar Toni · Answer

Generally Speaking: DPI Engine means, the firewall will work in the Stream based approach. It will pickup the traffic on Port 443 and decrypt it. Leave the decrypted part to the proxy to decide, if blocked or not. 
 Direct/Standard Proxy on Port 8080 is not a DPI Engine based traffic. It means, the web proxy directly will pick up the traffic, not the DPI Engine. It will not leverage on the advantages of DPI (Decrypt TLS1.3, performance increase etc.).

Web Proxy vs DPI

Top Replies