topic Re: Can PA firewall work as Explicit proxy in General Topics

Can PA firewall work as Explicit proxy

mohammedsalhis — Tue, 16 Nov 2021 16:39:07 GMT

Dear All,

Can Palo Alto firewall works as explicit proxy for internal usets ? Appreciate sharing official article .

Re: Can PA firewall work as Explicit proxy

OtakarKlier — Tue, 16 Nov 2021 20:55:23 GMT

Hello,

Depends on your definition of proxy. However yes the PAN can act as a proxy if you enable user-id and set your policies to inspect and log the traffic.

Hope that helps.

Re: Can PA firewall work as Explicit proxy

BPry — Wed, 17 Nov 2021 01:16:38 GMT

@mohammedsalhis,

In the traditional sense of an explicit proxy being configured directly on a client, then no. The firewall can't be configured as an explicit proxy from that regard. It can act like a transparent proxy as @OtakarKlier mentioned.

In the end I like to tell people that the exact same functionality can be achieved, but its kind of wrong to call the firewall a "proxy" in the old school sense of the word.

Re: Can PA firewall work as Explicit proxy

Mick_Ball — Wed, 17 Nov 2021 08:18:17 GMT

It’s a No. the ssl proxy is a proxied connection but only for the ssl handshake and key negotiation to enable packet decryption. The actual traffic flow from A to B is simply decrypted and then re-encrypted. Is is not re-written as would be by a true proxy.

Re: Can PA firewall work as Explicit proxy

mohammedsalhis — Wed, 17 Nov 2021 08:52:40 GMT

Thank you all