1 Reply Latest reply on Jan 10, 2014 1:13 AM by lubomir.cerny

    WEB GATEWAY SITE Configuration for PR and DR

    bse.networksecurity

      Hi All,

       

      Presently we have two Web gateway having version 7.0, configured in HA (Master instance and Site instance) at PR site.

      Each Gateway having physical IP and same cluster IP.Every client using cluster IP as a proxy for browsing Internet.

       

      Now we are proposing another two web gateway at DR site for BCP.

      How can we configure these two web gateways in a same manner of PR? and how it work?

      Client proxy IP should be same which is at PR, There should not be any client intervention.How can we achieve this?

       

      Thanx

        • 1. Re: WEB GATEWAY SITE Configuration for PR and DR
          lubomir.cerny

          Hi.

          We use DNS names + proxy.pac client config. Proxy.pac can direct clients to use cluster dns name first, if not responding than use backup cluster name last is to go direct if no proxy cluster respond.

           

          ie:

          function FindProxyForURL(url, host)

              {

              hostip=dnsResolve(host);

              myip=myIpAddress();

              if (isPlainHostName(host) ||

                  isInNet(hostip, "127.0.0.1", "255.255.255.255") ||

                  isInNet(hostip, "192.168.0.0", "255.255.0.0") )

                  return "DIRECT";

              else

                  return "PROXY PRproxy.domain.com:8080; PROXY DRproxy.domain.com:8080; DIRECT";

              }

           

          For systems which does not support proxy.pac, the DNS CNAME points to DRproxy record can be changed in case of PR troubles.