This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Proxy vs Non Proxy

Dear Experts,

Can someone shed some light as to why would anyone ever need to use web proxy (mean explicitly configuring proxy settings in user's browser, i think sophos call it direct mode). In general discussion on the internet, ppl have different opinions like it can strip ads from websites etc but i think Sophos can do all this stuff with DPI and SSL inspection also.

So in which cases(s) does sophos recommend (or have to) implement web proxy (configuring explicit settings in user browser)

This thread was automatically locked due to age.

Parents

0 Keyur over 4 years ago

Hi adnan khan

I would request you to refer the article- https://community.sophos.com/kb/en-us/123522

For web proxy deployment- https://community.sophos.com/kb/en-us/125585

Regards,

Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel
0 adnan khan over 4 years ago in reply to Keyur

Dear Keyur,

I have already visited those links, they only tell me the configuration. My question was more from the understanding point of view. Not how but why
Cancel
Vote Up 0 Vote Down

Cancel
0 Keyur over 4 years ago in reply to adnan khan

Hi adnan khan

In a certain scenario when your XG firewall is not acting as a gateway but still you want your browser traffic to be passed from the firewall for scanning purposes. So proxy deployment completely depends on the requirement or the network setup.

Regards,

Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to adnan khan

Hi,

at this stage of its development DPI and SSL/TLS inspection does not perform the same scanning against check databases. When you setup firewall rules that use DPI with some features you will see a yellow exclamation mark warning the some functions are not available. To enjoy full internet security at this stage you need to use the web proxy.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v20.0.2 MR-2

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 4 years ago in reply to adnan khan

Hi,

at this stage of its development DPI and SSL/TLS inspection does not perform the same scanning against check databases. When you setup firewall rules that use DPI with some features you will see a yellow exclamation mark warning the some functions are not available. To enjoy full internet security at this stage you need to use the web proxy.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v20.0.2 MR-2

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data