a

P R OXY SG AD M IN IST RATO R TRAIN IN G

Agenda
Deployment Method

Authentication

Content Filtering

Streaming Media

Manage Web
Applications

Caching

SSL Proxy
Prevent Malware

Track Activity
Exception Pages

Chapter One Deployment Method

Explicit Proxy
Transparent Proxy
Physically in-path
Virtually in-path: WCCP or PBR

Comparing Explicit andTransparent

Proxy
Explicit Proxy

TransparentProxy

Clients are aware that requests go

through a proxy; the source IP address in
a request is that of
theProxySGappliance.

Clients are not aware of a proxy in the

network; the source IPaddress in a
request is that of the client.

Depending on the deployment method,

clients must be configured manually.

No configuration is needed on the client,

but you must set up a service and define
it as being transparent.

Recommended for sites that:

- use authentication realms
- use SSL

Recommended for sites that:

- have inline physical deployment
- require scalability

Transparent Proxy Deployments

Physically in-path

Virtually in-path: WCCP or PBR

ProxySG appliance are place in the

Relies on routers, firewalls, or switches
physical network path, using two bridged that support the redirection of
interfaces on the appliance.
intercepted traffic toany interface
These interfaces handle all traffic
without redirection.

Use WCCPto capture traffic destined for

the Internet and redirect it to the
ProxySG for processing and policy
evaluation.

Ensures that theProxySGappliance has

the potential to control all user traffic
destined for the Internet.

Provides options for balancing load

among severalProxySGappliances and
is fault tolerant, sending traffic to the
Internet directly.

Transparent Proxy Deployments

Physically in-path

Transparent Proxy Deployments

Physically in-path
Allows the ProxySG appliance to handle all traffic flowing from your
user network to the Internet.
All traffic flows through the appliance, but only interesting traffic is
processed and subjected to policy.

Transparent Proxy Deployments

Virtually in-path: WCCP or PBR

http://stackoverflow.com/questions/2355568/create
-a-openssl-certificate-on-windows

Transparent Proxy Deployments

Physically in-path
Allows the ProxySG appliance to handle all traffic flowing from your
user network to the Internet.
All traffic flows through the appliance, but only interesting traffic is
processed and subjected to policy.

Title and Content Layout with Chart

6
5
4
3
2
1
0

Category 1

Category 2
Series 1

Category 3
Series 2

Series 3

Category 4

Two Content Layout with Table

First bullet point here

Group 1

Group 2

Second bullet point here

Class 1

82

95

Third bullet point here

Class 2

76

88

Class 3

84

90

Title and Content Layout with

SmartArt

Click icon to add picture