Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 13: Setting Up Web Services
Using the HTTP proxy
380
2 Create an IP address network object for the protected server to which your
remote trusted users will be connecting (for example, a Microsoft Exchange
Server). For information on creating an IP address network object, see
“Configuring IP address objects” on page 145.
3 Create a Secure Web Application Defense with the following configuration:
Note: For more information on configuring a Secure Web Application Defense,
see “Creating Web or Secure Web Application Defenses” on page 156.
a In the Type field, select Server.
b Select the Decrypt Web Traffic check box.
c [Optional] If you are configuring remote access to an internal Microsoft
Exchange Server, select the Rewrite Microsoft OWA HTTP check box.
d Select the appropriate Firewall Certificate.
e Select the Encryption/Decryption Methods you want to allow.
f [Optional] Configure additional Secure Web Server Enforcements.
g Click the Save icon to save the new defense.
4 Create an HTTPS proxy rule to allow access. The fields listed below must
be configured as specified:
Note: You can configure rule fields that are not listed below as you see fit. For
more information on creating proxy rules, see “Creating proxy rules” on page
222.
• General tab—Service Type=Proxy, Service=HTTPS, Action=Allow
• Source/Dest tab—Redirect Host=IP Address network object for the
protected server, Redirect Port=80
• [Optional] Authentication tab—If you want to require users to
authenticate via the proxy before being allowed access, you will need to
select Authenticate using SSO.
• [Optional] Time tab—Configure as needed.
• Application Defense tab—Select the defense you created in
step 3.
5 Add the HTTPS proxy rule to the active proxy rule group.
Once this rule is included in the active rule group, the Sidewinder G2 is
ready to allow trusted remote users access to the internal network.
How trusted remote users gain access to the internal network
This section lists the steps required for trusted remote users to gain access to
a protected internal server. The procedure will vary depending on whether you
have configured the HTTPS proxy rule to require authentication.