CacheGuard Help

Hi,

It is also possible that you didn't connect the right CG ports to your other network devices. The following command gives you the association between physical (Ethernet) ports and logical interfaces:
link bond
You can use it to identify ports on your CG. Please note that the internal ...

The default proxy port is 8080. The 8090 port is the default Web GUI administration port.

Please double check that 10.11.3.3:8080 is used as HTTP, HTTPS and FTP proxy. Also Chrome under a supported desktop environment (such as Windows) uses the system proxy settings. Did you setup the proxy ...

(for security reasons I deleted the links that reveal your public IP addresses - below your IP configuration)

ip internal 10.11.3.3 255.255.255.0
ip external xxx.xxx.xxx.107 255.255.255.248

ip route 10.10.20.0 255.255.255.0 10.11.3.254 10
192.168.254.0 255.255.255.0 10.11.3.254 10
default xxx ...

Can you hit an HTTP (not S) website such as http://www.example.com to check network connectivity please ?

Do you have any other security devices in front of your CG? If so, can you please check that they don't block Web traffic and/or make SSL inspection by generating dynamic certificates?

Please ...

Hi,
Can you also please provide with the website that you are trying to browse via CacheGuard proxy?
Thanks in advance,

Hi,

Thank you for your post.

Can you please let us know the following:
Your client OS?
Your client browser & version?

Did you activate the SSL mediation mode? To know if the SSL Mediation mode is activated or not please use the following command from the CLI:
mode sslmediate

Best Regards,

Hello,

One more thing: as www.facebook.com use HTTPS and not HTTP, the redirection to the guarding message page can't work and your Web browser will get an error. This is normal and is is due to the nature of HTTPS that can't be redirected to a third page. Maybe you better test the URL guarding ...

Hi,

URLs specified in urls.gz should not contain the protocol part. Actually the the name "urls" is not really appropriate. For instance www.facebook.com/directory is correct while https://www.facebook.com/directory is not.

Domain names specified in domains.gz should contain domain base names. For ...

Hello,

You don't need to register your appliance for the URL guarding to work. To simplify, you have the possibility to don't use filter but only the default policy. Can you please give us your domain and url lists and the ouput of the following commands?
urllist
guard filter
guard policy
guard ...

Hi,

Sorry for the delayed response.

Well, it seems you are in asymmetric routing configuration. As CG acts as a stateful firewall, requests and related responses should pass by the same network interface. In your configuration Web client/browser requests pass by the internal interface while ...