Sidewinder G2 6.1.2 Administration Guide - Glossary of Technical ...

Chapter 13: Setting Up Web Services
Using the Web proxy server
382
Setting up Web access using the Web proxy server
The following steps provide an overview of the tasks you must do to set up
Web access using the Web proxy server.
1 Configure the appropriate proxy rules to restrict Web access.
Once you enable the Web proxy server, you must configure one or more
proxy rules to control the burbs from which users can browse, and to which
burbs they can connect. See Chapter 8 for detailed information on setting
up proxy rules.
When configuring the proxy rule for a Web proxy server connection, be sure
to specify Server in the Service Type field.
2 Configure and enable the Web proxy server. See “Configuring the Web
proxy server” on page 383.
3 [Optional] Configure authentication Web users.
You can configure the Sidewinder G2 to authenticate all users requesting
Web service using either a basic UNIX password or stronger authentication
methods before the Sidewinder G2 makes the network connection. Refer to
“Configuring authentication services” on page 284 for details on the authentication
methods supported by the Sidewinder G2.
4 Inform users how to configure their Web browsers. See “Configuring
browsers for the Web proxy server” on page 389.
5 Test a Web connection.
You can test the Web proxy server by starting a Web browser from one of
your internal systems, and entering the address of a Web site you know is
valid—for example, you could attempt to access Secure Computing at the
following URL: http://www.securecomputing.com.
Note: Make sure you use a system from which you did not deny access.
Error messages when using the Web proxy server
If you configure a Web proxy server proxy rule to deny a particular Web
connection and that connection is attempted by a user, the message Access
Denied by Firewall Access Rules is sent to the user. This message is
stored in the following file:
/usr/local/squid/etc/cvs/errors/ERR_SCC_DENIED
The message that appears can be modified by editing the file above.
Note: You must be in the Admn domain to edit this file.
If the file does not exist or is empty, the following message is issued to the
user:
Forbidden by proxy ACL check