Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 40 subscribers
  • Views 10469 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web filtering; transparent or off?

JimmyPommerenke

I'm having troubles configuring the web filter.

If I turn it completely off (I believe) by disabling HTTP scanning and putting 'none' as web filter in the fw policy rule and disabling the "web proxy" tick in device access; my systems can no longer surf the web. Enabling the above allows them to surf again. Do I miss something?

On the other hand I do see the value in filtering, yet I'd like it to be transparent instead of running on port 3128 (web protection > web proxy). Where can I enable the transparent mode (so I don't have to configure all clients with the upstream proxy?

Thanks,

Jimmy



This thread was automatically locked due to age.
Parents
  • 0

    There is no "transparent proxy" enable switch (or I haven't found one).

    To enable filtering / inspection you just select a web filter and/or enable HTTP/HTTPS malware scanning on a specific network policy.

    I suspect that something is wrong with proxy auto configuration if your clients can't browse the web with webproxy access disabled.

    Look in the connection list if your clients do actually make HTTP connections and what rule is used.

    Regards,
    Slawek

Reply
  • 0

    There is no "transparent proxy" enable switch (or I haven't found one).

    To enable filtering / inspection you just select a web filter and/or enable HTTP/HTTPS malware scanning on a specific network policy.

    I suspect that something is wrong with proxy auto configuration if your clients can't browse the web with webproxy access disabled.

    Look in the connection list if your clients do actually make HTTP connections and what rule is used.

    Regards,
    Slawek

Children
No Data
Unfiltered HTML