Thread Info
  • Locked Locked
  • Replies 2 replies
  • Subscribers 2 subscribers
  • Views 11936 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

web appliance in transparent mode not allowing any connection

ionutjar

Hello,

I try to setup a test web appliance before deploying on network. I was able to set it up on explicit proxy mode and everything seem to work as expected, unfortunately when is switched to transparent mode isn't allowing any request to pass thru(from same source ip address), error in browser is :

Forbidden

The page or resource you are trying to access is restricted via a security measure on the remote server. You do not have permission to access the page or resource.

 
https traffic is redirected to port 80 of web appliance using a firewall (mikrotik) and packets are reaching using same source as in explicit proxy mode, unfortunately web appliance isn't allowing it ,  I've try to see if syslog is showing any useful info (external syslog to a linux machine) but no information is logged when traffic is blocked.
I've even try to add as source 0.0.0.0/0 but without success
My question is  if is any solution to see why a request is blocked to be able to debug further this situation. 
Or if anyone had a similar issue to give me some hints.
Thank you


This thread was automatically locked due to age.
Parents

  • Have you changed the Deployment Mode in Config > Network > Network Interface to "Transparent". Without this setting, the port 80 traffic will not be internally diverted to the proxy.

    You also need to make sure that the traffic is rerouted to the appliance as the next hop, but that the destination IP of the packets is not changed. If the firewall changes the destination address to the IP of the SWA, then the SWA's HTTP server will attempt to respond to the requests rather than handling it through the proxy.

    Regards
    Rich

Reply

  • Have you changed the Deployment Mode in Config > Network > Network Interface to "Transparent". Without this setting, the port 80 traffic will not be internally diverted to the proxy.

    You also need to make sure that the traffic is rerouted to the appliance as the next hop, but that the destination IP of the packets is not changed. If the firewall changes the destination address to the IP of the SWA, then the SWA's HTTP server will attempt to respond to the requests rather than handling it through the proxy.

    Regards
    Rich

Children
Unfiltered HTML