Parent proxy configuration doesn't work

Hi,

you do not appear to be using a username and password for the parent proxy as indicated in the KBA?

Ian

I'm not using one in the proxy, in XG is not mandatory and if I configure the browser with the IP and port of the proxy it works (I see the traffic in the proxy) without using username and password.

Anyway the KBA contradicts the interface, which says that you have to configure the proxy in the fw rule. I have tried enabling the proxy and the dpi proxy in the fw rule and it doesn't work either.

If I don't put any proxy in the rule the browsing doesnt even work and I don't see any traffic in the "parent" proxy, when I use any of the 2 sophos proxies (DPI or OLD) it works because it is using sopshos proxy.

Hi,

I am not sure what you mean with this

"The proxy (transparent) only receives comunications from URL's contacted by sophos XG directly but from anything else in the network."

I think you might have left something out?

Ian

I mean that I only see SophosXG traffic, but I don't see traffic from anything else in the network.

In order to work it requires a LAN LAN with masquerading NAT rule here is better explained than in the official KBA, in fact the KBA in wrong because it doesnt mention the use of masquerading in LAN LAN

community.sophos.com/.../129542

Anway I don't understand why it needs Masq in a LAN LAN rule or what it does exactly

Good catch. Did you submit an update for the original KBA?

Ian

BTW you have to select the proxy in the rule to make it work, this doesn't appear either in the KBA but Sophos Web ui gives you a hint as I posted in one of the pics above

Yes, I sent a link to this thread so they can see everything

In the lan-lan rule with MASQ is enough to do it with the port the proxy is using.