Adding proxy chaining to an explicit web proxy policy
You enable proxy chaining for web proxy sessions by adding a web proxy forwarding server or server group to an explicit web proxy policy. In a policy you can select one web proxy forwarding server or server group. All explicit web proxy traffic accepted by this security policy is forwarded to the specified web proxy forwarding server or server group.
To add an explicit web proxy forwarding server - web‑based manager
1. Go to Policy & Objects > Policy > Explicit Proxy and select Create New.
2 Configure the policy:
Explicit Proxy Type | Web |
Source Address | Internal_subnet |
Outgoing Interface | wan1 |
Destination Address | all |
Schedule | always |
Action | ACCEPT |
Web Proxy Forwarding Server | Select, fwd-srv |
3 Select OK to save the security policy.
To add an explicit web proxy forwarding server - CLI
1. Use the following command to add a security policy that allows all users on the 10.31.101.0 subnet to use the explicit web proxy for connections through the wan1 interface to the Internet. The policy forwards web proxy sessions to a remote forwarding server named fwd-srv
config firewall explicit-proxy-policy
edit 0
set proxy web
set dstintf wan1
set scraddr Internal_subnet
set dstaddr all
set action accept
set schedule always
set webproxy-forward-server fwd-srv
end