This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Web Security

Hi,

i would like to seek for your advice regarding WS Appliance. we are currently using Sophos WS appliance with explicit setup. all user http/https browsing are filtered by proxy by configuring proxy settings in individual computer. is there anyway that we can filter outbound internet traffic without configuring individual browser settings with our current setup? thanks

:14469


This thread was automatically locked due to age.
Parents
  • Hi Kheiren,

    Unfortunately, in explicit mode it's the browsers' job to send traffic to the proxy, so there is no way to do this completely transparently.

    You could consider using a wpad.dat auto-configuration file.  This lets you to use the 'Auto-detect' settings feature in the browser which might make proxy configuration easier.   An example can be found here:

    http://www.sophos.com/support/knowledgebase/article/38784.html

    Security-wise it would also be good practice to block direct HTTP/HTTPs traffic on your firewall.  This will prevent clients from getting web access unless they have the proxy settings configured.

    If this isn't quite what you need, you may want to think about the Transparent and Bridged modes that we do.  This will allow you to filter web traffic regardless of proxy settings.  You can find more info in 'Help > Getting Started > Network Deployment' on your web appliance.

    Hope this helps,

    Tom.

    :14485
Reply
  • Hi Kheiren,

    Unfortunately, in explicit mode it's the browsers' job to send traffic to the proxy, so there is no way to do this completely transparently.

    You could consider using a wpad.dat auto-configuration file.  This lets you to use the 'Auto-detect' settings feature in the browser which might make proxy configuration easier.   An example can be found here:

    http://www.sophos.com/support/knowledgebase/article/38784.html

    Security-wise it would also be good practice to block direct HTTP/HTTPs traffic on your firewall.  This will prevent clients from getting web access unless they have the proxy settings configured.

    If this isn't quite what you need, you may want to think about the Transparent and Bridged modes that we do.  This will allow you to filter web traffic regardless of proxy settings.  You can find more info in 'Help > Getting Started > Network Deployment' on your web appliance.

    Hope this helps,

    Tom.

    :14485
Children
No Data