Skip to main content
Information Security

Return to Question

added 53 characters in body
Source Link
Joseph
Joseph
  • 21
  • 3

I have a BlueCoat ProxySG 810 appliance and want to use it as both an HTTP Proxy Server for clients on the Inside interface of a PIX 525 Firewall (OS Version = 8.0(4)) and a Reverse Proxy Server for my Web Servers on the DMZ.

  1. Should I place the ProxySG 810 on the DMZ?
  2. If I do so, does the ProxySG 810 need to be allowed access the Inside network (i.e. Initialize connections to Inside) to be able to serve as an HTTP Proxy Server to the Inside Clients?
  3. I think the answer to the 2nd question is no; if such, is it sufficient to just allow access from Inside to the DMZ (and ban the opposite direction)?

In other words: is it required to create an ACL rule to allow access from DMZ (ProxySG 810) to the Inside?

Notes:

  1. PIX 525 (8.0(4)) supports WCCP.
  2. The Outside interface of the PIX 525 is connected directly to the Internet.

I have a BlueCoat ProxySG 810 appliance and want to use it as both an HTTP Proxy Server for clients on the Inside interface of a PIX 525 Firewall (OS Version = 8.0(4)) and a Reverse Proxy Server for my Web Servers on the DMZ.

  1. Should I place the ProxySG 810 on the DMZ?
  2. If I do so, does the ProxySG 810 need to access the Inside network (i.e. Initialize connections to Inside) to be able to serve as an HTTP Proxy Server to the Inside Clients?

In other words: is it required to create an ACL rule to allow access from DMZ (ProxySG 810) to the Inside?

Notes:

  1. PIX 525 (8.0(4)) supports WCCP.
  2. The Outside interface of the PIX 525 is connected directly to the Internet.

I have a BlueCoat ProxySG 810 appliance and want to use it as both an HTTP Proxy Server for clients on the Inside interface of a PIX 525 Firewall (OS Version = 8.0(4)) and a Reverse Proxy Server for my Web Servers on the DMZ.

  1. Should I place the ProxySG 810 on the DMZ?
  2. If I do so, does the ProxySG 810 need to be allowed access the Inside network (i.e. Initialize connections to Inside) to be able to serve as an HTTP Proxy Server to the Inside Clients?
  3. I think the answer to the 2nd question is no; if such, is it sufficient to just allow access from Inside to the DMZ (and ban the opposite direction)?

Notes:

  1. PIX 525 (8.0(4)) supports WCCP.
  2. The Outside interface of the PIX 525 is connected directly to the Internet.
added 9 characters in body
Source Link
Joseph
Joseph
  • 21
  • 3

I have a BlueCoat ProxySG 810 appliance and want to use it as both an HTTP Proxy Server for clients on the Inside interface of a PIX 525 Firewall (OS Version = 8.0(4)) and a Reverse Proxy Server for my Web Servers on the DMZ.

  1. Should I place the ProxySG 810 on the DMZ?
  2. If I do so, does the ProxySG 810 need to access the Inside network (i.e. Initialize connections to Inside) to be able to serve as an HTTP Proxy Server to the Inside Clients?

In other words: is it required to create an ACL rule to allow access from DMZ (ProxySG 810) to the Inside?

Notes:

  1. PIX 525 (8.0(4)) supports WCCP.
  2. The Outside interface of the PIX 525 inis connected directly to the internetInternet.

I have a BlueCoat ProxySG 810 appliance and want to use it as both an HTTP Proxy Server for clients on the Inside interface of a PIX 525 Firewall (OS Version = 8.0(4)) and a Reverse Proxy Server for my Web Servers on the DMZ.

  1. Should I place the ProxySG 810 on the DMZ?
  2. If I do so, does the ProxySG 810 need to access the Inside network (i.e. Initialize connections to Inside) to be able to serve as an HTTP Proxy Server to the Inside Clients?

In other words: is it required to create an ACL rule to allow access from DMZ (ProxySG 810) to the Inside?

Notes:

  1. PIX 525 (8.0(4)) supports WCCP.
  2. The Outside interface of the PIX 525 in connected to the internet.

I have a BlueCoat ProxySG 810 appliance and want to use it as both an HTTP Proxy Server for clients on the Inside interface of a PIX 525 Firewall (OS Version = 8.0(4)) and a Reverse Proxy Server for my Web Servers on the DMZ.

  1. Should I place the ProxySG 810 on the DMZ?
  2. If I do so, does the ProxySG 810 need to access the Inside network (i.e. Initialize connections to Inside) to be able to serve as an HTTP Proxy Server to the Inside Clients?

In other words: is it required to create an ACL rule to allow access from DMZ (ProxySG 810) to the Inside?

Notes:

  1. PIX 525 (8.0(4)) supports WCCP.
  2. The Outside interface of the PIX 525 is connected directly to the Internet.
Fixed formatting
Source Link
edit approved Dec 20, 2013 at 23:45
Trina
edit approved Dec 20, 2013 at 23:45
Trina
  • 103
  • 3

I have a BlueCoat ProxySG 810 appliance and want to use it as both an HTTP Proxy Server for clients on the Inside interface of a PIX 525 Firewall (OS Version = 8.0(4)) and a Reverse Proxy Server for my Web Servers on the DMZ.

  1. Should I place the ProxySG 810 on the DMZ?
  2. If I do so, does the ProxySG 810 need to access the Inside network (i.e. Initialize connections to Inside) to be able to serve as an HTTP Proxy Server to the Inside Clients? (In other words: is it required to create an ACL rule to allow access from DMZ (ProxySG 810) to the Inside?)

Note 1In other words: PIX 525is it required to create an ACL rule to allow access from DMZ (8.0(4)ProxySG 810) supports WCCP. Note 2: The Outside interface of the PIX 525 in connected to the internet.Inside?

Notes:

  1. PIX 525 (8.0(4)) supports WCCP.
  2. The Outside interface of the PIX 525 in connected to the internet.

I have a BlueCoat ProxySG 810 appliance and want to use it as both an HTTP Proxy Server for clients on the Inside interface of a PIX 525 Firewall (OS Version = 8.0(4)) and a Reverse Proxy Server for my Web Servers on the DMZ.

  1. Should I place the ProxySG 810 on the DMZ?
  2. If I do so, does the ProxySG 810 need to access the Inside network (i.e. Initialize connections to Inside) to be able to serve as an HTTP Proxy Server to the Inside Clients? (In other words: is it required to create an ACL rule to allow access from DMZ (ProxySG 810) to the Inside?)

Note 1: PIX 525 (8.0(4)) supports WCCP. Note 2: The Outside interface of the PIX 525 in connected to the internet.

I have a BlueCoat ProxySG 810 appliance and want to use it as both an HTTP Proxy Server for clients on the Inside interface of a PIX 525 Firewall (OS Version = 8.0(4)) and a Reverse Proxy Server for my Web Servers on the DMZ.

  1. Should I place the ProxySG 810 on the DMZ?
  2. If I do so, does the ProxySG 810 need to access the Inside network (i.e. Initialize connections to Inside) to be able to serve as an HTTP Proxy Server to the Inside Clients?

In other words: is it required to create an ACL rule to allow access from DMZ (ProxySG 810) to the Inside?

Notes:

  1. PIX 525 (8.0(4)) supports WCCP.
  2. The Outside interface of the PIX 525 in connected to the internet.
Source Link
Joseph
Joseph
  • 21
  • 3