Configuring Upstream Proxy - NCOS-Content-Filtering-Upstream-Web-Proxy/Configuring-Upstream-Proxy

Content Filtering Using Upstream Proxy

ft:locale
en-US
ft:sourceName
Paligo_Prod
Document Type
Article

To complete these steps, make sure to have the hostname or IP address for the upstream proxy server. For this example, the upstream proxy address is "proxy.example.com" using HTTP port 8888.

  1. Log into NetCloud Manager.

  2. Select Groups in the left-side navigation panel.

  3. Select the desired group.

  4. Select Configuration and then Edit.

  5. Navigate to SECURITY > Web Access Filtering > Upstream Proxy Settings.

  6. Select Enable.

  7. In the Proxy Address field, enter the hostname or IP address of the proxy server.

  8. In the HTTP Port field (or HTTPS Port field if HTTPS is being used), enter the port for the proxy server.

  9. Select Save.

    upstream-proxy.png
  10. Navigate to SecurityWeb Access Filtering > Network Web Filter Rules.

    Note

    Perform this step when HTTPS filtering to the proxy, which will be necessary for most cases.

    Selecting Filter HTTPS enables redirection of all port 443 traffic into the filter proxy. The proxy will then extract the hostname from the Server Name Indication (SNI). If the SNI is unavailable, then the original destination IP address is used for filtering. No decoding of the SSL/TLS session is done.

  11. Select Filter HTTPS.

  12. Select Save.

    filter_HTTPS.png

HTTP traffic (and HTTPS traffic, if configured) is sent to the proxy server. To confirm whether traffic is being sent to the proxy server, visit a website such as http://www.whatismyip.com, or search Google for "what is my ip". If the upstream proxy server is configured properly, hosts on the internet always see the proxy server's IP address (or another IP address to which the proxy server is passing the data), rather than seeing the Cradlepoint router's WAN IP address.