This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Proxy through different Gateway

We have two WAN links. A bonded T1 (default Gateway) and a FIOS line.

Currently, as I understand it, web proxy traffic travels through the default gateway.

Is there a way to route proxy traffic through the FIOS line instead? We would like to keep our bonded T1 as the default gateway.

Policy routes for HTTP/S traffic seem to simply bypass the proxy rules and authentication and go straight out the FIOS interface.

Thanks!


This thread was automatically locked due to age.
Parents
  • 1 DMZ [by Interface] DMZ (Network)Webserver → Any → Any →External Main (T1)

    and

    2 HTTP/S Proxy External Main (Address)(T1) →HTTP & HTTPS →Any →FIOS External

    Since your HTTP Proxy is running in a non-transparent mode (AD-SSO), you don't need the first rule.  All you need is a rule that handles the Proxy traffic without intercepting the traffic from the internet with your webserver.





    That should be all you need!

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 1 DMZ [by Interface] DMZ (Network)Webserver → Any → Any →External Main (T1)

    and

    2 HTTP/S Proxy External Main (Address)(T1) →HTTP & HTTPS →Any →FIOS External

    Since your HTTP Proxy is running in a non-transparent mode (AD-SSO), you don't need the first rule.  All you need is a rule that handles the Proxy traffic without intercepting the traffic from the internet with your webserver.





    That should be all you need!

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data