Applicable to versions: version 9.4.1 build 2
In certain countries it is required that the Internet access be routed through a government-approved proxy server. In this situation, it is necessary that the security appliance routes the user access request through the government-approved proxy server by.
Apart from this, certain proxy servers are used for caching web contents and it is required that the user request is routed through such proxy servers.
In above mentioned cases, it is necessary to configure security appliance as a proxy server. In other words, the security appliance must act as a proxy server for another proxy server.
The Proxy server through which the security appliance routes the user request is called Parent proxy. Alternate popular terms used for parent proxy are Upstream proxy and Forward Proxy.
Above mentioned needs are satisfied by Cyberoam by simply configuring the Parent proxy IP address in Cyberoam.
Parent Proxy Deployment Scenarios
Parent proxy can be deployed in the:
Case 1: Parent proxy deployed in the Internet
When Parent proxy is deployed in the Internet, Cyberoam is to be configured as a proxy server for the LAN users. Cyberoam routes all the outbound requests through parent proxy.
Figure 1 - Parent proxy deployed in the Internet
Log on to Web Admin Console, go to System > HTTP Proxy > Configure HTTP Proxy and configure parent proxy IP address and communication port.
Case 2: Parent proxy deployed in LAN/DMZ
When Parent proxy is deployed in the LAN or DMZ, Cyberoam is to be configured as a proxy server for the LAN users. Cyberoam routes all the outbound requests through parent proxy.
Figure 2 - Parent Proxy deployed in DMZ
Figure 3 - Parent Proxy deployed in LAN
Configuration (when Parent proxy is deployed in LAN)
Log on to Web Admin Console
Step 1. Go to System > HTTP Proxy > Configure HTTP Proxy and configure Upstream proxy IP address and communication port.
Step 2. Configure firewall rule
a. Create host for Parent proxy
b. Create LAN to WAN firewall rule for Parent proxy
To prevent routing loop, do not apply Internet access policy (IAP) and HTTP scanning.
c. Create LAN to LAN firewall rule
If parent proxy is deployed in DMZ, create DMZ to WAN and DMZ to DMZ firewall rule.
Document version – 1.0-31/08/2008
| 
