Anda di halaman 1dari 18

a

P R OXY SG AD M IN IST RATO R TRAIN IN G

Agenda
Deployment Method

Authentication

Content Filtering

Streaming Media

Manage Web
Applications

Caching

SSL Proxy
Prevent Malware

Track Activity
Exception Pages

Chapter One Deployment Method


Explicit Proxy
Transparent Proxy
Physically in-path
Virtually in-path: WCCP or PBR

Comparing Explicit andTransparent


Proxy
Explicit Proxy

TransparentProxy

Clients are aware that requests go


through a proxy; the source IP address in
a request is that of
theProxySGappliance.

Clients are not aware of a proxy in the


network; the source IPaddress in a
request is that of the client.

Depending on the deployment method,


clients must be configured manually.

No configuration is needed on the client,


but you must set up a service and define
it as being transparent.

Recommended for sites that:


- use authentication realms
- use SSL

Recommended for sites that:


- have inline physical deployment
- require scalability

Transparent Proxy Deployments


Physically in-path

Virtually in-path: WCCP or PBR

ProxySG appliance are place in the


Relies on routers, firewalls, or switches
physical network path, using two bridged that support the redirection of
interfaces on the appliance.
intercepted traffic toany interface
These interfaces handle all traffic
without redirection.

Use WCCPto capture traffic destined for


the Internet and redirect it to the
ProxySG for processing and policy
evaluation.

Ensures that theProxySGappliance has


the potential to control all user traffic
destined for the Internet.

Provides options for balancing load


among severalProxySGappliances and
is fault tolerant, sending traffic to the
Internet directly.

Transparent Proxy Deployments


Physically in-path

Transparent Proxy Deployments


Physically in-path
Allows the ProxySG appliance to handle all traffic flowing from your
user network to the Internet.
All traffic flows through the appliance, but only interesting traffic is
processed and subjected to policy.

Transparent Proxy Deployments


Virtually in-path: WCCP or PBR

http://stackoverflow.com/questions/2355568/create
-a-openssl-certificate-on-windows

Transparent Proxy Deployments


Physically in-path
Allows the ProxySG appliance to handle all traffic flowing from your
user network to the Internet.
All traffic flows through the appliance, but only interesting traffic is
processed and subjected to policy.

Title and Content Layout with Chart


6
5
4
3
2
1
0

Category 1

Category 2
Series 1

Category 3
Series 2

Series 3

Category 4

Two Content Layout with Table


First bullet point here

Group 1

Group 2

Second bullet point here

Class 1

82

95

Third bullet point here

Class 2

76

88

Class 3

84

90

Title and Content Layout with


SmartArt

Click icon to add picture