Proxy Setup

[amansour]

Hi All; We are integrating a few products that require portal capture and integration with proxies.  Is there a way we can force traffic for http and https to use a proxy with specified settings, this might be a n00b question as I didn't go head to toe through the postings yet.

[mrajdev]

As far as I know there is no way for PA to force the traffic to a proxy server for HTTP and HTTPS traffi.

[jcostello]

It might be possible to use policy based forwarding to push all of the http and https traffic to your proxies if you were to put the proxies in another zone.

[friento]

I have done Policy Base Forwarding only with http thou works good so far, I don't have https implemented yet.

[amansour]

Do you think there would be a problem with HTTPS? Was there a problem?

[amansour]

Also this could all be avoided if I could forward to an ICAP server and depending on the response deliver a portal page.

[friento]

I don't have ssl intercept enable on my proxy, that's why I did not send traffic to it.

[amansour]

Okay I setup request and response and SSL intercept on the proxy.  The million dollar question is whether the security filtering will still apply for the PBR if I forward to the proxy.  I need to make sure my security profiles and url filtering happens before I allow traffic to the proxy.