Sophos XGS WAN Proxy

Question

Hello, 
 
 On our SG we were able to open the proxy to be used from WAN (of course using authentication) 
 On XGS this is not possible? 
 From an older entry here on the forum I can found a post like "open proxy from wan is risky and this is why WE dont allow it" ... 
 Yeah, maybe it is risky but we are the paying customer (well maybe not much longer...) and so I think it would be nice to let us decide. 
 Give a "warning - this option is not good and could lead to security risks" but at least give us the option - or is ther a way now?

LuCar Toni · Answer

SFOS does not support Basic Authentication. So how would you, if you enable it, authenticate yourself in WAN? 
 What would be the idea here? You could configure your WAN as a DMZ interface, then setup a Route 0.0.0.0 to the GW of your WAN and run with this. But this will end up in an open Proxy for the world, as there is no real way to authenticate yourself. Most (if not all) Authentication methods on SFOS are build for using for a secure network.

Sophos XGS WAN Proxy

Top Replies