topic Transparent Proxy in General Topics

Transparent Proxy

sureshvarghese — Wed, 09 May 2018 10:47:15 GMT

Hello,

I am new with PA family and currently evaluating PA-3220 / PA-3060 appliance

I would like to know if i can implement transparent proxy feature with the above applaince for all my users including branch office without making major changes to network architecture

FYI, branch office are currenlty connected to HQ over IPsec site-to-site tunnel

INternet outbreak is from my HQ office for all users including HQ

Currently we are using explicit proxy using PAC file.

Appreciate all the inputs i can get which will help me with my evaluation.

many thanks in advance.

Re: Transparent Proxy

OtakarKlier — Wed, 09 May 2018 14:13:53 GMT

Hello,

There are many definitions of proxy and what they can do. So it would help to know what features of a proxy ou are looking for. But we techinically use the PAN's as a proxy since they handle the features and logging/filtering we require.

Regards,

Re: Transparent Proxy

Remo — Wed, 09 May 2018 20:16:20 GMT

If you are anyway routing everything to your HQ, then it is absolutely possible to use PaloAlto as transparent proxy without major network architecture changes.

PS: If you decide to buy a PaloAlto, do not use a PA-3060. You deginately want to go with the 3220 - specially if you need TLS decryption as this hardware has more of the modern chips that are build for current algorithms, not like the 3060 which is already some years old.

Re: Transparent Proxy

sureshvarghese — Thu, 10 May 2018 03:57:54 GMT

Hi Remo, many thanks for the clarification and advise, much appreciated. will defintely look at 3220

best regards

Re: Transparent Proxy

sureshvarghese — Thu, 10 May 2018 03:58:57 GMT

Thanks Otakar, aprpeciate the advise.

best regards