topic Re: HTTP-Proxy allow or deny app in General Topics

HTTP-Proxy allow or deny app

PaulBrock — Tue, 21 Mar 2017 02:09:03 GMT

Hi Everyone,

I have a inbound rule in place fro my forward facing web-server and am tightning the policy down to only allow a few apps and a few default ports ssl and web-browsing

When i was looking at what traffic was hitting the rule, Isaw the following applications

SSL 443 = iexpected

web-browsing (80) =expected

however i am noticing

http-proxy on port 80

My Q.

Is the HTTP-proxy application something I need to allow is this legitimate traffic , or is this something that should be denied ?

Regards

and thanks in advance

Paul

Re: HTTP-Proxy allow or deny app

pulukas — Tue, 21 Mar 2017 09:26:03 GMT

You won't need http-proxy. This is when your users are trying to evade url filtering by using and outside proxy service.

You can find the detailed definitions in the applipedia on the web site or inside the web UI on the box.

https://applipedia.paloaltonetworks.com/

Re: HTTP-Proxy allow or deny app

PaulBrock — Tue, 21 Mar 2017 21:28:23 GMT

Thankyou Steve,

for a direct and simple answer, very much appreciated.

Re: HTTP-Proxy allow or deny app

E.Arslan — Fri, 07 Mar 2025 12:46:33 GMT

I think it depends. For example if you are using a url filtering app like IBOSS, you will be getting this type of false positive alerts. If you are using such a solution, I highly recommend you to view your http-proxy logs(Traffic logs filtered by application) . Then search some or all destination ip addresses of your http-proxy log search.