This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ftp and https transparent?

If i switch on the http-proxy in transparent mode only http traffic is possible. in standard mode i can use http ftp and https tru the proxy. So I left it in standard-mode and tried it with dnat/snat -> Internal (Network) -> Any / HTTP None Internal (Address) / SQUID. But with this config i get a sqid error: While trying to retrieve the URL: / . What did i wrong? Or is there any other solution to make http, https and ftp transparent?
thanks.

This thread was automatically locked due to age.

0 Manctastic over 21 years ago in reply to bce

http://www.cisco.com/en/US/products/sw/conntsw/ps491/products_configuration_guide_chapter09186a00801cc947.html

...where it says "Transparent HTTPS caching using SSL works as follows" seems to say that it is technically possible, but only if your as wealthy as a small country and can afford all that cisco gear.... [:)]

I think its also doable with SSl accelerators which also cost a small fortune..
Cancel
Vote Up 0 Vote Down

Cancel
0 THoehne over 21 years ago in reply to bce

Hi!

AFAIK HTTPS-Traffic isn't cached... So why not create a filter rule, that lets HTTPS pass directly? (Same for FTP...)

HTTP is then cached through the transaprent proxy...
I think, this would be the best solution!

Cheers,
Thorsten
Cancel
Vote Up 0 Vote Down

Cancel
0 FN-Eagle over 21 years ago in reply to VelvetFog

We wanted to introduce transparent proxy, but because of the usage of user authentication it was not possible. This is our solution: We created a user login-scripts to set the proxy setting in the IE for every client during to login process. Additionally we changed the permission that a normal user is not able to change these settings on his/her machine.

It is now also some kind of “transparent”, because they cannot change it.
Cancel
Vote Up 0 Vote Down

Cancel
0 bce over 21 years ago in reply to FN-Eagle

if you use a windows net why didn´t you enter the proxy for ie in the ad´s gpo?
Cancel
Vote Up 0 Vote Down

Cancel
0 VelvetFog over 21 years ago in reply to FN-Eagle

[ QUOTE ]
We created a user login-scripts to set the proxy setting in the IE for every client during to login process.

[/ QUOTE ]I guess you must still be running an old Windows NT 4 server then. On any newer version of Windows server, Win2K or Win2K3, you would simply force the IE settings through the use of a group policy. If you make the change in the default group policy on the domain, it will automatically reconfigure IE to use the web proxy on every connected machine.
Cancel
Vote Up 0 Vote Down

Cancel
0 bce over 21 years ago in reply to VelvetFog

that´s it.
Cancel
Vote Up 0 Vote Down

Cancel
0 FN-Eagle over 21 years ago in reply to VelvetFog

[ QUOTE ]
I guess you must still be running an old Windows NT 4 server then.

[/ QUOTE ]

Yes, correct.
Cancel
Vote Up 0 Vote Down

Cancel
0 VelvetFog over 21 years ago in reply to FN-Eagle

So upgrading your ASL was just the beginning...

The rest of your network is still sitting there, waiting... [:)]
Cancel
Vote Up 0 Vote Down

Cancel