5 Replies Latest reply on Jul 10, 2014 6:38 AM by asabban

    Configuring Web Gateway with Squid




      I want to configure Web Gateway such that all traffic first goes through Gateway and then to Squid, apart from some exceptions which will bypass squid. This could be specified in a pac file. So, there will two layers, the inner layer being Gateway and the outer one being Squid. Is it possible to configure Gateway for this and if yes, how?

        • 1. Re: Configuring Web Gateway with Squid



          you can configure MWG to use Squid as a next-hop proxy. An example rule set is part of the product.


          MWG cannot read exceptions from a PAC file, you probably have to build the exceptions within MWG in rules, such as:


          URL.Destination.IP is in range          Stop Rule Set

          URL.Destination.IP is in range                    Stop Rule Set

          Always                                                                                 Stop Rule Set          Enable Next-Hop Proxy(<Squid>)


          Such a rule set would tell MWG to directly talk to and networks directly, while for all other destinations Squid will be used as a next-hop proxy.




          • 2. Re: Configuring Web Gateway with Squid

            Thank you Andre for the extremely quick reply, that was most helpful. I'll try doing what you said, and if I run into trouble, I will post again.

            • 3. Re: Configuring Web Gateway with Squid

              Instead of separate rules for every IP-Range, it could be faster to either have IP Range List, or maybe it would be also easier to put all IP Ranges into text file, and host it somewhere outside of MWG & access it via External Lists...


              P.S. another idea - extract IP ranges automatically from proxy.pac by providing filtering regex :-)

              1 of 1 people found this helpful
              • 4. Re: Configuring Web Gateway with Squid

                Thing is, I can't use IP ranges. To be more specific, I want to route traffic of certain domains through Squid and the rest needs to bypass Squid. I think the filtering regex idea sounds good.


                Message was edited by: rabee on 7/10/14 5:42:09 AM CDT
                • 5. Re: Configuring Web Gateway with Squid

                  Actually the IP Range was just an example. You have several hundrets of properties you can use to decide whether Squid should be used or not.