topic Re: URL filtering in General Topics

URL filtering

infotech — Thu, 23 Oct 2014 14:40:14 GMT

I am trying to elminate my ISA 2006 server and use url filtering. The setting to use the ISA server were applied using a GPO that sets the internet options/connections to user the proxy server. I modified the GPO and have confirmed that the internet options setting was removed from the users pc's. But the users are still going to the old proxy server, what is the best way to check to see what might be sending them to the proxy server and if its the PA that is routing them there still?

Re: URL filtering

HULK — Thu, 23 Oct 2014 14:44:46 GMT

Hello Infotech,

Could you please check the routing table of the PAN firewall, if it is still having an active route pointing towards the OLD proxy server.

Thanks

Re: URL filtering

HULK — Thu, 23 Oct 2014 14:49:45 GMT

FYI..

Thanks

Re: URL filtering

infotech — Thu, 23 Oct 2014 14:58:27 GMT

The ip address of the proxy is 172.16.1.11 and here is the primary 172.16.0.0/12 in the static routes

Re: URL filtering

HULK — Thu, 23 Oct 2014 15:02:55 GMT

Edited:

Hello Infotech,

The mentioned subnet will cover 172.16.0.0 -to-172.16.15.255. Hence it will include the PROXY server IP address 172.16.1.11.

Thanks

Re: URL filtering

HULK — Thu, 23 Oct 2014 15:04:53 GMT

Hello Infotech,

What is the next-hop IP address of that static route.

Thanks

Re: URL filtering

infotech — Thu, 23 Oct 2014 15:09:56 GMT

From what I can see next hop is listed as next vr

Re: URL filtering

HULK — Thu, 23 Oct 2014 15:11:27 GMT

Hello Infotech,

Could you please let us know, user traffic is coming through which physical interface/VR ( PAN firewall) ...?

Thanks

Re: URL filtering

infotech — Thu, 23 Oct 2014 15:13:51 GMT

They should be coming through the primary vr but how can I confirm that? I have a secondary ISP but it should only be online when my primary is down

Re: URL filtering

HULK — Thu, 23 Oct 2014 15:15:09 GMT

pls share the routing table of primary VR.

Thanks

Re: URL filtering

infotech — Thu, 23 Oct 2014 15:17:01 GMT

I thought I did but here it is again

Re: URL filtering

HULK — Thu, 23 Oct 2014 15:17:19 GMT

opps Please share the interface (Network > Interface) screenshot.

Thanks

Re: URL filtering

infotech — Thu, 23 Oct 2014 15:20:25 GMT

Here it is

Re: URL filtering

HULK — Thu, 23 Oct 2014 15:22:05 GMT

Which one is the LAN side ( Trust) interface...?

Thanks

Re: URL filtering

infotech — Thu, 23 Oct 2014 15:24:35 GMT

Here are the layer 2 or the routes to the inside network

Re: URL filtering

HULK — Thu, 23 Oct 2014 15:45:25 GMT

Hello Infotech,

From the routing table of the PAN firewall, it looks like the default route is pointing towards the primary-ISP for all internet traffic (0.0.0.0/0) and if a packet comes for specific destination 172.16.0.0/12, then only it will redirect to the next VR "Secondary". Hence, PAN will not redirect internet traffic towards the POXY. You may need to check the Laptop settings once more.

Thanks

Re: URL filtering

infotech — Thu, 23 Oct 2014 15:49:45 GMT

So are you telling me that the route is not sending the traffic to the proxy?

Re: URL filtering

HULK — Thu, 23 Oct 2014 15:53:18 GMT

Yes,

If the end-user's laptop/desktop sending traffic to 172.16.1.11, then only PAN will send it to the PROXY, else for all public destination IP address, the PAN firewall will route towards the Primary-ISP.

Thanks

Re: URL filtering

infotech — Thu, 23 Oct 2014 16:01:08 GMT

I don't see anything indicating that the pc is sending the traffic to the proxy I removed the internet options that would send it to the proxy

Re: URL filtering

Retired Member — Wed, 29 Oct 2014 13:14:04 GMT

have you solved the issue ?