Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Redirected proxy
connections
Chapter 9: Configuring Proxies
Redirected proxy connections
To monitor the number of concurrent connections for any of the proxies listed
above, in the Admin Console, select the dashboard. The upper-right portion of
the dashboard contains a link titled Proxy Connections. Click that link to see a
list of all proxies and servers that are currently running, with the current
number of connections that exist for that proxy.
For information on configuring the HTTP, HTTPS, or SQL proxy to enable
multiple instances, see “Configuring proxies” on page 266.
For typical Sidewinder G2 operation, proxies are configured to permit
connections from the internal network to the Internet. However, there may be
circumstances in which you want to allow an external client access to hosts
within your internal network (behind the Sidewinder G2). For example, you
may want to provide access to an internal Telnet server or you may want a
server inside your internal network to be able to receive news feeds from an
Internet news feeder.
You can set up proxy rules to redirect a connection between an external client
and the external side of the Sidewinder G2 to a system inside your network.
This rerouted connection to the internal host system hides the actual
destination from the system requesting the connection. You can configure
Sidewinder G2 proxy rules to translate connection requests to different
addresses or to different ports within the internal network.
The address or port translation provided by redirection is usually needed when
enabling proxying from the external network to the internal network. The
following section provides examples of both address and port redirection as
supported by the Sidewinder G2.
Important: All proxies pose a security risk. As with any external-to-internal proxy,
while you can guarantee the integrity of the Sidewinder G2, you cannot guarantee
the integrity of the system for which an external user will have access. For the rare
occasion where you configure an inbound proxy, you should always use a strong
authentication method.
Address redirection
If you need to configure a proxy that allows access to the internal network, but
do not want to provide routes to the internal network you will need to configure
the Sidewinder G2 for address redirection. Address redirection is implemented
in the Source/Dest tab of the Rule window on a per-rule basis. See Chapter 8
for information on configuring address redirection.
In the configuration shown in Figure 122, suppose you want to allow any host
in the Internet to Telnet to host 172.25.5.5 on the internal network.
247