topic Re: Anyone tried REVERSE PROXY on PAN in General Topics

Anyone tried REVERSE PROXY on PAN

kalyanram.piratla — Mon, 13 Feb 2012 11:16:30 GMT

Hi,

I was just wondering if anyone was successful in implementing Reverse Proxy solution on the PAN. As far as i know, Palo Alto does not do Reverse Proxy, but was even told that there was work around for it. Anyone who has been successful in acheiving this, could you please share it out with us.

Many thanks in advance.

Kind Regards,

Re: Anyone tried REVERSE PROXY on PAN

rmonvon — Mon, 13 Feb 2012 21:34:05 GMT

Hi...It depends on what you want accomplish with reverse proxy. We can perform SSL decryption and inspect the contents inside for apps, malware, etc simply by putting the PA device in front of your servers. Thanks.

Re: Anyone tried REVERSE PROXY on PAN

mikand — Tue, 14 Feb 2012 07:20:59 GMT

Also the PAN can be used for both SNAT ("forward proxy") and DNAT ("reverse proxy"), however it doesnt proxy any traffic on its own (except for the SSL and SSH part when doing termination).

So you can use a PAN to protect your webservers by setting up a DNAT rule along with SSL-termination to inspect HTTPS flows - and then in the security rule define which applications should be allowed (for example if its a bunch of Sharepoint-servers you wish to protect).