Can PA firewall work as Explicit proxy

[mohammedsalhis]

Dear All,

Can Palo Alto firewall works as explicit proxy for internal usets ? Appreciate sharing official article .

[OtakarKlier · Accepted solution]

Hello,

Depends on your definition of proxy. However yes the PAN can act as a proxy if you enable user-id and set your policies to inspect and log the traffic.

Hope that helps.

[BPry · Accepted solution]

@mohammedsalhis,

In the traditional sense of an explicit proxy being configured directly on a client, then no. The firewall can't be configured as an explicit proxy from that regard. It can act like a transparent proxy as @OtakarKlier mentioned. 

In the end I like to tell people that the exact same functionality can be achieved, but its kind of wrong to call the firewall a "proxy" in the old school sense of the word. 

[Mick_Ball · Accepted solution]

It’s a No. the ssl proxy is a proxied connection but only for the ssl handshake and key negotiation to enable packet decryption. The actual traffic flow from A to B is simply decrypted and then re-encrypted. Is is not re-written as would be by a true proxy. 

[mohammedsalhis · Accepted solution]

Thank you all