This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

exceptions for parent proxy

we are currently migrating from TMG to Sophos utm 9.4x. We have a customer where the proxy has no direct connection to the internet. We can only upstream to a parent proxy.

In TMG we can define exceptions for local intranet websites and/or segments. I can't find a way to do this in Sophos, except defining a second parent proxy which handles the local websites.

Other tips ?

Andre

This thread was automatically locked due to age.

Parents

0 sachingurung over 8 years ago

Hi Andre,

Configure an exception for the intranet hosts in Web Protection> Filtering option> exceptions.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 addicks over 8 years ago in reply to sachingurung

Hi Sachingurung,

what should I skip? I made an list of websites and tagged them as "direct". Now I can make an exception for destination sites tagged as "direct" , but which check should be skipped. I tested with "skip ur filterl" but that doesn't work.

grtx

Andre
Cancel
Vote Up 0 Vote Down

Cancel
0 sachingurung over 8 years ago in reply to addicks

Hi Andre,

I believe UTM is configured on Transparent mode in Web Protection. Go to, Web Protection> Filtering Option> Misc > Skip transparent mode Destination: add the specific URL here to skip the proxy.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 sachingurung over 8 years ago in reply to addicks

Hi Andre,

I believe UTM is configured on Transparent mode in Web Protection. Go to, Web Protection> Filtering Option> Misc > Skip transparent mode Destination: add the specific URL here to skip the proxy.

Thanks

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 addicks over 8 years ago in reply to sachingurung

Hi,

yes I know this option, however this is not working in our situation. The clients are using standard mode.

grtx

Andre
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 8 years ago in reply to addicks

You're right that the solution is to skip the proxy when accessing the locally-connected servers. In standard mode, this must be done in the browser. You can make a global change with a GPO if you have Active Directory. With the ubiquity of laptops used from multiple locations, it may be better for you to use a proxy auto configuration (PAC) file instead.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel