topic Policy Base Routing Local Traffic in Firewall and Security Management

Policy Base Routing Local Traffic

TUNGPHAM — Mon, 09 Oct 2023 04:17:01 GMT

Hi guys

i have issue about policy base routing

10.10.10.10 is my Proxy , so i want all traffic to internet go through Proxy , and i want stop routing with traffic internal : 10.0.0.0/8

so what can i config with new table and policy

bond1.1000 is VLAN connect SW , when i add this , the connection from VLANs in Firewall not accessible

Pls give me solution to resolve this !!!

Many thanks !!!

Re: Policy Base Routing Local Traffic

HeikoAnkenbrand — Mon, 09 Oct 2023 15:17:17 GMT

To use a firewall as transparent proxy forwarder for port 443 and 80 to an external proxy.
Normally, GRE tunnels are used to forward traffic to a external proxy.

1) Enable GRE on your proxy
2) Create a GRE interface on your gateway
3) Create a PBR rule/route for destination port 443 and 80 to the GRE interface
4) Create a access rule in SmartConsole