Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 2 subscribers
  • Views 7330 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Proxy Behind the RED

aldahan
we have a RED branch with Standard/Split config. reaching the internal is working via RED, we want to use the web proxy from the ASG to RED clients but i cannot make it work, packet filters is populated with RED --> internal and Internal --> RED, also RED --> HTTP and so on, also add the RED on allowed HTTP clients on the Web Proxy Global settings. what i am missing? Do I need to setup NAT/Masq?

Astaro ASG ver 8.103


This thread was automatically locked due to age.
Parents
  • 0
    You don't need to masq traffic that passes through the Proxy.

    Here's another possible solution: Leave the RED in split mode, and then configure the clients' browsers at the RED site to point at the Astaro HTTP/S Proxy.  Still, it's curious that you would want the split mode if you want all web traffic to go through the Astaro.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    You don't need to masq traffic that passes through the Proxy.

    Here's another possible solution: Leave the RED in split mode, and then configure the clients' browsers at the RED site to point at the Astaro HTTP/S Proxy.  Still, it's curious that you would want the split mode if you want all web traffic to go through the Astaro.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
  • 0 in reply to BAlfson
    You don't need to masq traffic that passes through the Proxy.

    Here's another possible solution: Leave the RED in split mode, and then configure the clients' browsers at the RED site to point at the Astaro HTTP/S Proxy.  Still, it's curious that you would want the split mode if you want all web traffic to go through the Astaro.

    Cheers - Bob



    Sir, the clients browsers are already configured, pinging the ASG LAN interface ii a success, we want to restrict web and leave everything like emails, IM etc...to flow to the RED internet source.  I will try to add the any uplink interface from the split networks configuration box. and see what happens
Unfiltered HTML