Does XG support HTTP header insertion?

Shunze,

Web Proxy settings has been moved to Web > Advanced Tab (It makes more sense).

As I know Cyberoam was able to manage x-forward using CLI command but the same are missing on XG.

https://docs.cyberoam.com/default.asp?id=156

I am not sure about it anyway.

Custom header are available for File Type only. Let see if someone else some ideas about how to accomplish it.

I am not able to test it. I am not at home (Still on holiday).

Thanks~

Forget this issue!

Since XG can't ask user to add proxy forcibly,

so XG can't satisfy the issue...

You can configure your network so that all users must go through the proxy.  This is not only an XG configuration, it is how you configure your network.

XG does not allow administrators to configure generic HTTP header insertion.

XG does allow allow to restrict Google Apps logins to domains you specify (which uses the HTTP header insertion behind the scenes).  In 16.01, edit the Web Policy, Advanced section.

"You can configure your network so that all users must go through the proxy."
How to configure this environment in gateway mode?

After blocked the LAN to WAN http/https, all of users can't surf the internet,
even they set the proxy through XG... 

If I don't add the restricted rule, users don't set the proxy and can surf the internet without any limit...

If you know how to configure it properly, please share it kindly~

Hi ShunjeeLee,

I see this question as to block access to GMAIL personal accounts but, allow corporate GMAIL account to work through XG. Please correct me if I am wrong. This feature was available with our legacy product Cyberoam and to my belief it was planned for the XG in v2. I am not sure if it is included or not. I will check this internally.

Meanwhile, you can always raise such requirements as feature requests here.

Thanks

Dear Michael,

I have been tested the "Restrict login domains for Google Apps" in web policy.

But the function failed...

After I restrict login with the domain "shunze.info", I still can login google with gmail account...

I have denied UDP 80 & 443 to block google QUIC protocol, and tested in Internet Explorer.
But both of Chrome & IE can login gmail with other domain.

So this function may not work on V16.01.2 correctly...

It so sad...

Did you apply the HTTP & HTTPS scan inside the FW-rule?

Thanks

Sorry, I forgot this...

After apply HTTP/HTTPS scan, this rule works well~

Thanks Sachingurung & Michael ~