5 Replies Latest reply on Jul 10, 2014 6:38 AM by asabban

    Configuring Web Gateway with Squid

    rabee

      Hello

       

      I want to configure Web Gateway such that all traffic first goes through Gateway and then to Squid, apart from some exceptions which will bypass squid. This could be specified in a pac file. So, there will two layers, the inner layer being Gateway and the outer one being Squid. Is it possible to configure Gateway for this and if yes, how?

        • 1. Re: Configuring Web Gateway with Squid
          asabban

          Hello,

           

          you can configure MWG to use Squid as a next-hop proxy. An example rule set is part of the product.

           

          MWG cannot read exceptions from a PAC file, you probably have to build the exceptions within MWG in rules, such as:

           

          URL.Destination.IP is in range 192.168.0.0/24          Stop Rule Set

          URL.Destination.IP is in range 10.0.0.0/8                    Stop Rule Set

          Always                                                                                 Stop Rule Set          Enable Next-Hop Proxy(<Squid>)

           

          Such a rule set would tell MWG to directly talk to 192.168.0.0/24 and 10.0.0.0/8 networks directly, while for all other destinations Squid will be used as a next-hop proxy.

           

          Best,

          Andre

          • 2. Re: Configuring Web Gateway with Squid
            rabee

            Thank you Andre for the extremely quick reply, that was most helpful. I'll try doing what you said, and if I run into trouble, I will post again.

            • 3. Re: Configuring Web Gateway with Squid
              alexott

              Instead of separate rules for every IP-Range, it could be faster to either have IP Range List, or maybe it would be also easier to put all IP Ranges into text file, and host it somewhere outside of MWG & access it via External Lists...

               

              P.S. another idea - extract IP ranges automatically from proxy.pac by providing filtering regex :-)

              1 of 1 people found this helpful
              • 4. Re: Configuring Web Gateway with Squid
                rabee

                Thing is, I can't use IP ranges. To be more specific, I want to route traffic of certain domains through Squid and the rest needs to bypass Squid. I think the filtering regex idea sounds good.

                 

                Message was edited by: rabee on 7/10/14 5:42:09 AM CDT
                • 5. Re: Configuring Web Gateway with Squid
                  asabban

                  Actually the IP Range was just an example. You have several hundrets of properties you can use to decide whether Squid should be used or not.

                   

                  Best,

                  Andre