aPROxysg Administrator training

AgendaDeployment MethodContent FilteringManage Web ApplicationsSSL ProxyPrevent MalwareAuthenticationStreaming MediaCachingTrack ActivityException PagesChapter One Deployment MethodExplicit ProxyTransparent ProxyPhysically in-pathVirtually in-path: WCCP or PBR

Comparing Explicit andTransparent ProxyExplicit ProxyTransparentProxyClients are aware that requests go through a proxy; the source IP address in a request is that of theProxySGappliance.Clients are not aware of a proxy in the network; the source IPaddress in a request is that of the client.Depending on the deployment method, clients must be configured manually.No configuration is needed on the client, but you must set up a service and define it as being transparent.Recommended for sites that:- use authentication realms- use SSLRecommended for sites that:- have inline physical deployment- require scalability

Transparent Proxy DeploymentsPhysically in-pathVirtually in-path: WCCP or PBRProxySG appliance are place in the physical network path, using two bridged interfaces on the appliance.Relies on routers, firewalls, or switches that support the redirection of intercepted traffic toany interfaceThese interfaces handle all traffic without redirection.Use WCCPto capture traffic destined for the Internet and redirect it to the ProxySG for processing and policy evaluation.Ensures that theProxySGappliance has the potential to control all user traffic destined for the Internet.Provides options for balancing load among severalProxySGappliances and is fault tolerant, sending traffic to the Internet directly.Transparent Proxy Deployments

Physically in-pathTransparent Proxy DeploymentsPhysically in-path

Allows the ProxySG appliance to handle all traffic flowing from your user network to the Internet.

All traffic flows through the appliance, but only interesting traffic is processed and subjected to policy.Transparent Proxy Deployments

Virtually in-path: WCCP or PBR

http://stackoverflow.com/questions/2355568/create-a-openssl-certificate-on-windowshttp://stackoverflow.com/questions/2355568/create-a-openssl-certificate-on-windowsTransparent Proxy DeploymentsPhysically in-path

Allows the ProxySG appliance to handle all traffic flowing from your user network to the Internet.

All traffic flows through the appliance, but only interesting traffic is processed and subjected to policy.Title and Content Layout with ChartTwo Content Layout with TableFirst bullet point hereSecond bullet point hereThird bullet point hereGroup 1Group 2Class 18295Class 27688Class 38490Title and Content Layout with SmartArt