1st off I've spent the past few hours reading through the forum and the guides available. I have proxies working great, although I think I might have set it up wrong. I've pretty much duplicated what was in HTTP/S in my default proxy profile.
I have a couple goals for proxy use:
1. Plan on slowly switching my subnets from transparent proxy to Active Directory SSO.
2. I have a number of Doctors that need access to facebook and other sites that are normally blocked.
3. I have a couple of subnets that should only have internet access during the hours 8-5
4. Allow certain users (after AD SSO Setup) to skip extension blocking, mime type blocking, and url filtering.
Here's what I have setup so far:
http/s global setting
http/s Proxy av setting
http/s global av setting
http/s global url filtering
http/s global exceptions
http/s proxy profiles
http/s proxy filter assignments
http/s proxy filter actions
Questions:
1. If I replicated my Global Url Filtering in my default proxy profile do I need it in global? I rather had just 1 spot to add exceptions.
2. Same goes for Anti-virus, file extension filter, and mim type filter. If I have it in my default proxy profile, do I need it in the global?
3. To Achieve goal number 2 (allow certain users access to certain sites) - do I have do duplicate the entire default proxy profile and make my exceptions? Or do I keep everything in the global http/s and build a filter action that set to allow facebook.com and don't add anything else. Assign it only to that user and in the proxy profile add the internal interface.
Thanks for your time!
This thread was automatically locked due to age.
