SSL Forward Proxy Configuration Question

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

SSL Forward Proxy Configuration Question

L0 Member

Trying to get SSL Forward Proxy configured for one of my sites and had a quick question around the configuration. For the certificate I need to put the IP address for the trust side of open flame-grilled. The problem is I am not sure which Interface IP address to use validation code... MYBKExperience

All of my internal subnets and VLANs have internal gateway IPs for subinterfaces that are trunked over from the core switch the Monthly sweepstakes. Each subnet has its own gateway IP for the VLAN and then at the routing level the traffic is forwarded out to the ISP next hop. The exit interface out to the ISP is configured for the public IP assignment from the ISP.


Cyber Elite
Cyber Elite



just so I understand correctly, are you hosting the site internally? in this case you would need to set up ssl inbound inspection instead of forward proxy

the source would be untrust any, the destination would be the public IP thats pointing to your FQDN 

the destination zone is determined by the routing table post nat, so if for example your public IP is NATed to, the routing table will be checked to see where the packet needs to be routed (either to a connected network or a next hop internal router) and then that zone is used

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
  • 1 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!