Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 1 subscriber
  • Views 358 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Creating HTTP Proxy using different address to Internal

rosbif_ccnp
Hi,
I've been trying to find a solution to this problem, but apparently my search skills have deserted me today.

I have an ASG120 appliance, using 7.5x
An internal network  - 192.168.0.x/24
2 externals on PPPoE

I want to place the HTTP Proxy on the address 172.30.100.100:8080 (the Astaro internal HTTP proxy, not a separate external on a DMZ)

My user's browsers will be pointed to this proxy for all web requests.

This is a client request and may not be altered. (From an existing configuration found on a Fortigate)

I've tried creating a secondary address on the internal LAN ethernet but this wouldn't work (ie the browser didn't find the proxy using the settings I had.)

I'm not particularly experienced with UTMs, so apologies if this is a muppet question, I'm right out of ideas currently, and don't want to spend the next several days trying to find an answer if it is right in front of me!!!)

Thank you all in advance

LB


This thread was automatically locked due to age.
Parents
  • 0
    Is there any reason you can't just change the IP of 'Internal (Address)' to 172.30.100.100?

    If not, then maybe a NAT rule would work: 'Internal (Network) -> HTTP Proxy -> [172.30.100.100] : DNAT to Internal (Address)'.  It's not a clean solution, but I think it just might work.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    Is there any reason you can't just change the IP of 'Internal (Address)' to 172.30.100.100?

    If not, then maybe a NAT rule would work: 'Internal (Network) -> HTTP Proxy -> [172.30.100.100] : DNAT to Internal (Address)'.  It's not a clean solution, but I think it just might work.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data