Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 5 replies
  • Answers 2 answers
  • Subscribers 2 subscribers
  • Views 6194 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

exceptions for parent proxy

addicks

we are currently migrating from TMG to Sophos utm 9.4x. We have a customer where the proxy has no direct connection to the internet. We can only upstream to a parent proxy.

In TMG we can define exceptions for local intranet websites and/or segments. I can't find a way to do this in Sophos, except defining a second parent proxy which handles the local websites.

Other tips ?

 

Andre



This thread was automatically locked due to age.
Parents
  • 0

    Hi Andre,

    Configure an exception for the intranet hosts in Web Protection> Filtering option> exceptions.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0 in reply to sachingurung

    Hi Sachingurung,

    what should I skip? I made an list of websites and tagged them as "direct". Now I can make an exception for destination sites tagged as "direct" , but which check should be skipped. I tested with "skip ur filterl" but that doesn't work.

     

    grtx

    Andre

     

  • 0 in reply to addicks

    Hi Andre,

    I believe UTM is configured on Transparent mode in Web Protection. Go to, Web Protection> Filtering Option> Misc > Skip transparent mode Destination: add the specific URL here to skip the proxy.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • 0 in reply to sachingurung

    Hi,

     

    yes I know this option, however this is not working in our situation. The clients are using standard mode.

     

    grtx

    Andre

  • 0 in reply to addicks

    You're right that the solution is to skip the proxy when accessing the locally-connected servers.  In standard mode, this must be done in the browser.  You can make a global change with a GPO if you have Active Directory.  With the ubiquity of laptops used from multiple locations, it may be better for you to use a proxy auto configuration (PAC) file instead.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0 in reply to addicks

    You're right that the solution is to skip the proxy when accessing the locally-connected servers.  In standard mode, this must be done in the browser.  You can make a global change with a GPO if you have Active Directory.  With the ubiquity of laptops used from multiple locations, it may be better for you to use a proxy auto configuration (PAC) file instead.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML