comp.security.firewalls archive
Re: Help Checkpoint Firewall-1 NGX : stream redirecting
From: Joshua Reed <joshua.reed@gmail.com>
Date: Wed Apr 26 2006 - 21:29:00 CEST
Date: Wed Apr 26 2006 - 21:29:00 CEST
You're correct, he won't need to do anything like changing proxy
settings in the browser, provided he uses UFP to redirect outbound HTTP
requests to this URL filtering server.
However, transparent proxy will *not* work if transparent
*authentication* is needed or desired (quite commonly this is the case
actually). Usually these 'transparent' *authenticated* solutions
authenticate against the MS AD In order to do that, the firewall would
need to be on the domain (which Check Point, wisely, doesn't recommend)
or to have UserAuthority agent on one of the AD controllers.
Received on Mon May 1 01:08:56 2006