168
Web proxy access
SX-GATE's web proxy will provide secured browser access to the Internet. In addition
to HTTP, HTTPS, Gopher and WAIS, the proxy also supports browser access to FTP
servers. The web proxy can not be used by true FTP clients. For these, SX-GATE
provides an FTP proxy which can be enabled later on in this wizard.
Select operation mode of SX-GATE web proxy
There are different ways to get access to the web proxy. Choose one of the following
options.
For all settings except for "transparent", the browsers must be
configured to use SX-GATE as proxy (port 8080). Otherwise this
option has no effect.
with manual user authentication
Select this option if you want the users to authenticate themselves by typing a
login and password before they get Internet access. Add the required accounts in
the user administration. The users have to become members of group "system-
proxy" to be accepted by the proxy.
with automatic user authentication (NTLM)
Here the user's current Windows domain authentication is used to automatically
authorize proxy access. The users will not be prompted for a login and password,
unless the browser doesn't support this authentication method. In this case the
credentials of an authorized Windows user have to be supplied.
With NTLM authentication, the SX-GATE group "system-
proxy" is not considered for authorization. So it is not
necessary to create user accounts for this purpose.
without user authentication
This mode grants proxy access without authentication. However it will not be
possible to configure user specific settings.
transparent
Selecting this option, SX-GATE's web proxy and firewall will be configured to
redirect HTTP connections with the standard destination port 80 to the web proxy.
The wizard will modify the firewall settings of ethernet interface "eth0" only. With
this option it is not necessary to adjust the proxy configuration of browsers.
Of course browsers with the correct proxy settings will still be able to connect.
