General discussion


Force Internet Proxy Server

By rbnntt ·
We are currently using the latest Web Marshal product for our web content manager and reporting software. We have both PC's, Win 2K & XP, with OS X Macs on our network. Due to descisions by my superiors, some of our PC users are allowed to use Firefox web browser. I am able to lock 2K and XP users IE proxy server settings using domain group policies, but the OS X users and Firefox can, and do, remove the proxy server settings.
My Question: Does anyone know of a way to force all computers to use the web proxy server?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by mshavrov In reply to Force Internet Proxy Serv ...

The easiest way is to block "non-Proxy" users. For example, if you have all users in one subnet, and your Proxy server in another subnet, just block "users" subnet for TCP port 80, and allow only your Proxy server to go over port 80. So, if someone will have their Proxy settings removed, they will be unable to go to the Internet.

Another way (may not work with your equipment) - configure WCCP on your router. I know for sure that Cisco routers allow you to configure WCCP detection on ther=ir interfaces, and forward all Web traffic to caching engine (in your case it's proxy server). But your server should support WCCP 1.1 or 2.0.


CCNP, CCDP, CCSP, Secutrity+, MCSE W2K, Sun SCSA, etc.

Collapse -

Is this done on the ISA

by titan.plant In reply to

How does one accomplish this rule on the ISA server?


Collapse -


by XT John In reply to Force Internet Proxy Serv ...

My only experience with a proxy server is a Linux box running Squid. There is a way to set up Squid to run as 'transparent', where all traffic is proxied, regardless of the existence of proxy settings on the client. We enable this to catch traffic at the proxy server that is trying to visit our web site. The clients are seeing a cached copy of our web site and never actually touching our web server. They are totally unawares of this on their end.

Related Discussions

Related Forums