We have a lot of developpers with new dev tools every months, Those tools may support a direct proxy mode but do not support auth. What would be the best practices in those cases? I just finish installing 7.6.2 in my lab and just get the Web Mapping setup working with SSL Scanner active (was suppose to work on this 5 years ago but 6.9.6 was still working until a week ago)...
If the tools support sock, could it be a solution? The McAfee Client Proxy?
If you are already using MCP in any way you may consider using it for this case also. It should work just fine
If these applications provide a specific user-agent in the header you may also bypass these from authentication based on the user-agent
No, this is our first rel 7 lab server, no MCP, no EPO management. Our users are still on a pair of 6.9.6 servers who both suddently lost their categories BD content on june 25th. We were supposed to migrate to a transparent proxy Fortigate firewall months ago but other priorities move things further...
I am trying to restore services on a pair of 7.6.2 servers and trying to anticipate the type of issues if we move in that direction...
I have requested more detailed informations from the developpers. With WW6.9, my collegue bypass the problem by associating the IP of the workstations to an IP map policy. It could be a short term work-around but not the solution. But I have to many other thing to look at before investing my time in thoses... I still have the server list and bypass to fill-in, the log export to WebReporter, the error pages to modify, etc...
PS: It seem that by accident I have exported my policy (2017-07-05_1554_Policies) to the User Exported section of the Rule set Library. How can I have that deleted???
PS2: If I find syntax errors in the french error pages, where can I report them???
Unfortunately there is no way to delete the exported policies on the UI. You would need to do this on the CLI
-Change Directory to you current active configuration:
# cd `cat /opt/mwg/storage/active_configuration`
-Go to the Custom Rule Set Library
# cd library/RuleGroups/custom/
-Delete the Rule Set
# rm NameOfRuleSet.xml
If you are still logged in to the UI, log out and then log in again.