URL filtering

[infotech]

I am trying to elminate my ISA 2006 server and use url filtering. The setting to use the ISA server were applied using a GPO that sets the internet options/connections to user the proxy server. I modified the GPO and have confirmed that the internet options setting was removed from the users pc's. But the users are still going to the old proxy server, what is the best way to check to see what might be sending them to the proxy server and if its the PA that is routing them there still?

[HULK]

Hello Infotech,

Could you please check the routing table of the PAN firewall, if it is still having an active route pointing towards the OLD proxy server.

Thanks

[HULK]

FYI..

Thanks

[infotech]

The ip address of the proxy is 172.16.1.11 and here is the primary 172.16.0.0/12 in the static routes

[HULK]

Edited:

Hello Infotech,

The mentioned subnet will cover 172.16.0.0 -to-172.16.15.255. Hence it will include the PROXY server IP address 172.16.1.11.

Thanks

[HULK]

Hello Infotech,

What is the next-hop IP address of that static route.

Thanks

[infotech]

From what I can see next hop is listed as next vr

[HULK]

Hello Infotech,

Could you please let us know, user traffic is coming through which physical interface/VR ( PAN firewall) ...?

Thanks

[infotech]

They should be coming through the primary vr but how can I confirm that? I have a secondary ISP but it should only be online when my primary is down

[HULK]

pls share the routing table of primary VR.

Thanks

[infotech]

I thought I did but here it is again

[HULK]

opps Please share the interface (Network > Interface) screenshot.

Thanks

[infotech]

Here it is

[HULK]

Which one is the LAN side ( Trust) interface...?

Thanks

[infotech]

Here are the layer 2 or the routes to the inside network