NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] AW: [FW-1] URL Screening with external Proxy



Hi

Thanks to all for responding. You're right, it is a
manual proxy configuration on the client side.

I also tried with action drop instead of reject,
and with the ip address of the web site instead
of the URL (there was an issue on 4.0 about that...).

I'm not able to change the configuration on the
proxy server (it's the proxy on a Swiss Bank,
outside "our" Bank). Same is true for outside firewall
direction Internet.

So best way would be to do something with written
policies for the users.

Regards
Klaus



-----Ursprüngliche Nachricht-----
Von: Mailing list for discussion of Firewall-1
[mailto:[email protected]]Im Auftrag von
Steck, Steffen M.
Gesendet: Freitag, 23. August 2002 15:57
An: [email protected]
Betreff: Re: [FW-1] URL Screening with external Proxy


Klaus,

I think you have a manual configured proxy on the clients' browser. Thus the
browser makes its request to the proxy on port 8080! Hence you cannot block
it at FW-1 (otherwise you block all web access as you already found out).
The only way to block it is at the proxy with some kind of acl, filter
software etc, depends on which proxy you use.

If you have a transparent proxy, all you can do depends on the way you
enforce transparency, so let us know a lil bit more ;-)

Regards
Steffen

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.