- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
How does the web proxy feature work in SonicOS?
03/26/2020 
49 People found this article helpful
40,083 Views
Description
NOTE: The proxy server must be located on the WAN or DMZ; it can not be located on the LAN.
Scenario 1: Proxy Web server is located on DMZ zone
- Login to the SonicWall management interface and navigate to Manage | Network | Web Proxy.
- Enter the Web Proxy server Name or IP address: e.g. 192.168.2.250.
- Enter the Proxy server Port: e.g. 8080 (assuming proxy server is configured to listen on port 8080).
- Click Apply to save the changes
SonicOS will auto add two NAT policies:
- The first will translate the traffic from Web Proxy Server back to HTTP.
- The second will forward HTTP request coming from all LAN PC's to the Web Proxy Server (192.168.2.250) on Port 8080, which is reachable via DMZ interface.
NOTE: These are auto generated NAT policies and cannot be edited/modified.
Scenario 2: Proxy Web Server located on WAN zone
- Login to the SonicWall management interface and navigate to Manage | Network | Web Proxy.
- Enter the Proxy server Name or IP address: e.g. 1.1.1.5.
- Enter the Proxy server Port: e.g. 8080 (assuming proxy server is configured to listen on port 8080).
- Click Apply to save the changes.
SonicOS will auto add one NAT policy:
- The policy will forward HTTP requests coming from all LAN PC's to the Web Proxy Server (1.1.1.5) on Port 8080, which is reachable via the WAN / X1 interface.
NOTE: This is an auto generated NAT policy and cannot be edited/modified.
Related Articles
- How to allow or block URI and sub-domains using Content Filtering
- Troubleshooting Single Sign-on (SSO) related errors
- How to enable and configure NTP?
Categories
- Firewalls > NSa Series > Networking
- Firewalls > NSv Series > Networking
- Firewalls > TZ Series > Networking
YES
NO