Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 13: Setting Up Web Services
An overview of Web services on Sidewinder G2
An overview of
Web services on
Sidewinder G2
374
Figure 157: Web access
for users on your internal
network
The Sidewinder G2 allows you to control connections between your internal
network(s) and the World Wide Web. Using Application Defenses, you can
configure the appropriate rules to protect a client (outgoing traffic), server
(incoming traffic), or both behind your Sidewinder G2. You can also configure
whether you will allow transparent, non-transparent, or both connections on a
per-rule basis.
Note: For information on configuring Application Defenses, see Chapter 6.
The following two sections provide a summary of the three most common types
of Web access that you can configure on the Sidewinder G2.
Web access for users on your internal network
Your internal users can access Web servers on the Internet or on a trusted
network. In either case, access can be regulated using a Web proxy (HTTP or
HTTPS), the Web proxy server, or both. When internal users have access to an
external Web server, it is called "outbound traffic."
internal network
internal
Web site
Web server
DMZ burb
Web proxy
Internet
external network
Web server
Web site
Access to your Web server by untrusted external users
You can set up a Web server on a network controlled by your Sidewinder G2.
The Web server should be contained on an isolated burb and network.
Untrusted external users will be able to access this Web server only if a Web
proxy is enabled on the Sidewinder G2. You can configure a Web proxy
(HTTP/HTTPS), the Web proxy server, or both to allow external users passage
through the Sidewinder G2 to the Web server. When external users have
access to an internal Web server, the traffic is called “inbound traffic.”