CacheGuard Help

Hi, It is also possible that you didn't connect the right CG ports to your other network devices. The following command gives you the association between physical (Ethernet) ports and logical interfaces: link bond You can use it to identify ports on your CG. Please note that the internal interface s...

The default proxy port is 8080. The 8090 port is the default Web GUI administration port. Please double check that 10.11.3.3:8080 is used as HTTP, HTTPS and FTP proxy. Also Chrome under a supported desktop environment (such as Windows) uses the system proxy settings. Did you setup the proxy configur...

(for security reasons I deleted the links that reveal your public IP addresses - below your IP configuration) ip internal 10.11.3.3 255.255.255.0 ip external xxx.xxx.xxx.107 255.255.255.248 ip route 10.10.20.0 255.255.255.0 10.11.3.254 10 192.168.254.0 255.255.255.0 10.11.3.254 10 default xxx.xxx.xx...

Can you hit an HTTP (not S) website such as http://www.example.com to check network connectivity please ? Do you have any other security devices in front of your CG? If so, can you please check that they don't block Web traffic and/or make SSL inspection by generating dynamic certificates? Please se...

Hi,
Can you also please provide with the website that you are trying to browse via CacheGuard proxy?
Thanks in advance,

Hi, Thank you for your post. Can you please let us know the following: Your client OS? Your client browser & version? Did you activate the SSL mediation mode? To know if the SSL Mediation mode is activated or not please use the following command from the CLI: mode sslmediate Best Regards,

Hello, One more thing: as www.facebook.com use HTTPS and not HTTP, the redirection to the guarding message page can't work and your Web browser will get an error. This is normal and is is due to the nature of HTTPS that can't be redirected to a third page. Maybe you better test the URL guarding with...

Hi, URLs specified in urls.gz should not contain the protocol part. Actually the the name "urls" is not really appropriate. For instance www.facebook.com/directory is correct while https://www.facebook.com/directory is not. Domain names specified in domains.gz should contain domain base na...

Hello, You don't need to register your appliance for the URL guarding to work. To simplify, you have the possibility to don't use filter but only the default policy. Can you please give us your domain and url lists and the ouput of the following commands? urllist guard filter guard policy guard rule...

Hi, Sorry for the delayed response. Well, it seems you are in asymmetric routing configuration. As CG acts as a stateful firewall, requests and related responses should pass by the same network interface. In your configuration Web client/browser requests pass by the internal interface while response...