Configuring Web Proxy Forwarding Settings

A Web proxy server intercepts HTTP requests and determines if it has stored copies of the requested Web pages. If it does not, the proxy completes the request to the server on the Internet, returning the requested information to the user and also saving it locally for future requests.

Setting up a Web proxy server on a network can be cumbersome, because each computer on the network must be configured to direct Web requests to the server.

If there is a proxy server on the SonicWALL appliance’s network, you can move the SonicWALL appliance between the network and the proxy server, and enable Web Proxy Forwarding. This forwards all WAN requests to the proxy server without requiring the computers to be individually configured.

Configuring Automatic Proxy Forwarding (Web Only)

NOTE: The proxy server must be located on the WAN or DMZ; it cannot be located on the LAN.

To configure a Proxy Web sever, select the Network > Web Proxy page.

1	Connect your Web proxy server to a hub, and connect the hub to the SonicWALL appliance’s WAN or DMZ port.

2	Type the name or IP address of the proxy server in the Proxy Web Server (name or IP address) field.

3	Type the proxy IP port in the Proxy Web Server Port field.

4	To bypass the Proxy Servers if a failure occurs, select Bypass Proxy Servers Upon Proxy Server Failure.

5	Select Forward DMZ Client Requests to Proxy Server if you have clients configured on the DMZ.

6	Select Divert traffic to the WXA series appliance’s Web Cache if you would like to divert web traffic to a WXA series appliance.

7

For Client Inclusion Address Object, specify the appropriate client inclusion option from the pull-down. Select the Address Object or Group that represents those local subnets with web traffic that should be delivered through the WXA Web Cache. Alternatively, choose Any and traffic from any source IP address is forwarded to the WXA.

8

For Server Exclusion Address Object, specify the appropriate server exclusion option from the pull-down. Select the Address Object or Group that contains the destination addresses of web servers for which traffic should not be diverted through the WXA Web Cache. By selecting None, no web server is excluded and all appropriate traffic is sent through the WXA.

9	Click Update.

10	Confirm the Description and Schedule and click Accept.

11	After the SonicWALL appliance has been updated, a message confirming the update is displayed at the bottom of the browser window.

Bypass Proxy Servers Upon Proxy Failure

If a Web proxy server is specified on the Firewall > Web Proxy page, selecting Bypass Proxy Servers Upon Proxy Server Failure allows clients behind the SonicWALL appliance to bypass the Web proxy server in the event it becomes unavailable. Instead, the client’s browser accesses the Internet directly as if a Web proxy server is not specified.

Adding a Proxy Server

To add a Web Proxy server through which users’ web request might come, complete the following:

1	In the User Proxy Settings sections, click Add.

2	Enter a proxy server host name or IP address in the text-field, and then click OK.

The new proxy server populates in the User Proxy Servers list. This list if full configurable and includes edit, remove, and delete actions.

3	Click Update.