GMS Internet Access through a Proxy Server

If the SonicWALL GMS server cannot access the Internet directly and needs to go through a proxy server, the following proxy entries are required in the sgmsConfig.xml file of the SonicWALL GMS server:

<Parameter name="proxySet" value="1"/>

<Parameter name="proxyHost" value="10.0.30.62"/>

<Parameter name="proxyPort" value="3128"/>

<Parameter name="proxyUser" value="0A57CF01AB39ACF8863C8089321B9287"/>

<Parameter name="proxyPassword" value="EE80851182B4B962FC3E0EDF1F00275A"/>

The proxyUser and proxyPassword parameters are required only if the Proxy Server requires authentication, in which case these are TEAV encrypted. This configuration supports both HTTP and SSL Proxy, as long as the settings are identical for both.

To exempt certain hosts from the proxy configuration and allow them to be connected to directly, add the following tag to sgmsConfig.xml:

<Parameter name="nonProxyHosts" value="*something.com|www.foo*|192.168.0.*"/>

The exact values of all of these parameters should be changed to the appropriate values for your deployment. The asterisk symbol (*) is a wildcard that means any string. The pipe symbol (|) is a delimiter for the hosts in the list.

To do TEAV encryption of the string “test,” go to the directory <gms-install>\bin in a DOS window. Type the following command:

..\jre\bin\java -cp . TEAV test

The following output displays:

input = [test]

Encrypted: 5F397A4552CC08F2A409A9297588F134

Decrypted: [test]

To edit the sgmsConfig.xml entries, complete the following steps:

1	Login to the UMH system management interface: http://<sgms_ipaddress>:<portnumber>/appliance

2	Navigate to the following URL: http://<sgms_ipaddress>:<portnumber>/appliance/techSupport.html

3	Edit the sgmsConfig.xml file using the Configuration File editor.