STEPS TO MAKE XG PROXY IN TRANSPARENT MODE WHEN IT IS NOT THE GATEWAY

Maybe the following article can provide some help:

https://community.sophos.com/kb/en-us/123522

Hi Paul,

Thanks for your response.

As advised, i went through the article and found it helpful. However, i want to achieve a transparent proxy with XG only mirroring the traffic and filtering it. It won't be at the edge of the network. Not a direct proxy.

kindly assist.

warm regards,

Kayode.

Kayode,

is the XG deployed in Bridge or Routing mode?

Thanks

Hi Iferrara,

The Xg deployment is in Routing mode.

Warm regards.

Kayode.

Kayode,

can you upload a detailed network map with client network, default gateway and routes.

Thanks

If you are using port 3128 you are doing a Direct/standard/explicit proxy. The clients must be configured (which can be done automatically) to use the proxy.

If you are using port 80/443 you are using transparent mode. Your overall network structure must be set up so that 80/443 traffic. Normally this is done by having all traffic flow transparently through the XG. The XG does not need to be at the edge, it just needs to be somewhere in the traffic flow between the client and the internet.

You may also be able to configure your routers to send 80/443 traffic through the XG transparently while other traffic flows though another device. See Cisco WCCP for example.