Escolar Documentos
Profissional Documentos
Cultura Documentos
SGOS 6.5
7
12
12
13
14
15
20
21
23
24
24
24
24
1. A user enters a URL in the browser's address bar. (This browser has already been configured to send traffic to the
appliance explicitly.)
2. The browser connects to the proxy service and sends the user request.The destination IP address is that of the
ProxySG appliance.
3. The appliance examines the request details (client IP, username/group if configured, URL, path, category) and
compares them against allow and deny policy. Based on proxy service and policy settings, the appliance allows
this request.
4. The ProxySG forwards the user's request to the OCS. The source IPaddress of the request is that of the
appliance.
5. When the OCS responds, the appliance adds the content to its cache and forwards the response to the user.
1. A user enters a URL in the browser's address bar. (The browser has already been configured to send traffic to the
appliance explicitly.)
2. The browser connects to the proxy service and sends the user request.The destination IP address is that of the
ProxySG appliance.
3. The appliance examines the request details (client IP, username/group if configured, URL, path, category) and
compares them against allow and deny policy. Based on proxy service and policy settings, the appliance denies
this request.
4. The appliance sends the user an exception page providing details on why the request was denied.
Whether an explicit deployment is appropriate for your organization could depend on business and security policy. You
should analyze your requirements to determine if explicit deployment is appropriate for you. For example, the deployment
type that best suits your needs could depend on whether your organization has a "bring your own device" (BYOD)policy.
To configure your network for explicit proxy, select a method to perform to deploy proxy settings to users, and then verify
that client connections are proxied explicitly.
1. Set Up an Explicit Proxy.
2. Test Explicit Client Connections.
Method
Download Explicit
Proxy Settings from a
PACFile
Tip Depending on your network configuration and users' requirements, you might want to use more than one of the
methods described above to deploy proxy settings. For example, you could use a PAC file for all client workstations in the network, but have users manually configure the browsers on their laptops.
Open Chrome.
Select Settings. If the option is present, select Show Advanced Settings.
Under Network, click Change proxy settings. The Internet Properties window appears.
On the Connections tab, click LAN settings.
The LANSettings window appears.
10
OpenSafari.
From the Apple menu, select Preferences.
From the Settings menu, select Preferences.
Click Advanced.
11
a read-only default PAC file, which specifies to use the appliance as the proxy server:
http://<ProxySG_IP_address>:<port>/proxy_pac_file
an editable PAC file, which specifies when to use the appliance as the proxy and which ports to use for specific
types of requests, as well as when to connect directly to the origin content server (OCS):
http://<ProxySG_IP_address>:<port>/accelerated_pac_base.pac
12
If the hostname matches yourdomain.com anywhere in the URL, redirect requests to 198.51.100.0; if the proxy
can't be reached, go direct
l
take the same action if the URL matches the specified ftp, images, or graphics URLs
If the request contains a Windows Media protocol (mmsor rtsp) redirect to 198.51.100.1 or 198.51.100.2
respectively; if the proxy can't be reached, go direct
If the request is for streaming media on yourdomain.com, redirect to 198.51.100.3; if the proxy can't be reached, go
direct
If the hostname is not a fully-qualified domain name(FQDN), is an internal FQDN, or is any host in the
altyourdomain.com domain, go direct
If none of the previous conditions apply, redirect to 198.51.100.10; if the proxy can't be reached, go direct
After you edit the accelerated PAC file you can load it directly on the appliance; see Deploy the PAC File from the
ProxySG Appliance.
Alternatively, you can deploy PAC information in the following ways:
n
Serve the PACFile from a WebServer - Upload the file to an internal web server, and then download the file to the
appliance.
Specify the PAC File Location in the Browser - Upload the file to an internal web server, and then instruct users to
specify the URL to the file in the browser.
<PAC_file_contents> is the PACfile contents you copied in step 3; paste the contents here
<eof> is an end-of-file marker; choose one that does not match any string in the PACfile itself
6. The CLI responds ok.
n
n
13
For an explanation of the contents of the file in this example, see Edit the Accelerated PAC File.
14
15
Open Firefox.
Select Tools >Options.
Select Advanced >Network.
In the Connection section, click Settings.
16
Open Chrome.
In the Chrome menu, select Settings.
Click Show advanced settings.
Scroll down. Under Network, click Change proxy settings.
17
18
19
20
21
22
23
24
24
24
24