Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 38 subscribers
  • Views 10568 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Help needed to setup Web Proxy only on ESXi

PabloDiablo

I know this is a request which is (partly) explained in the topic "Single NiC..."

But I have ESXi 6 running and a single NIC is not supported on software versions. I just want to route traffic through the Web Proxy.

I tried to setup the box in Bridge modus but this was not a good idea, it took my network almost down.

Then I setup with 2 NIC's in Gateway mode and give the LAN & WAN interface a local IP. But for some odd reason the WAN interface goes down every time.

Also it's not possible to disable the WAN interface and setting a gateway on the LAN interface...

My question is how to setup this properly? Only Web Proxy (filtering) on ESXi (6)?



This thread was automatically locked due to age.
  • 0
    You will need to get traffic in and out, so you need at least two ports/vlans. You could setup 2 vlans on one nic on two seperate networks. Not sure what you are trying to do is a really that easy with SF-OS. You might also need to setup a proxy pac or similar to use the SF-OS proxy fully.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v21 GA

    If a post solves your question please use the 'Verify Answer' button.

  • 0
    It is possibe, You can actually disconnect/Disable the WAN interface and use the XG in single ARM mode, does not have to make any changes, Connect your Network Cable to the LAN and assign an IP in the range and create a static route 0.0.0.0/0 pointing to the LAN gateway. So now the appliance will not route the traffic thru the WAN interface

    Create a LAN to LAN policy if you want to use this just for the web filtering.

    This should eliminate using the appliance in the Gateway on In line mode. Another name for this is Firewall on the Stick :)
Unfiltered HTML