topic Re: How do I confirm if the Transparent HTTP/HTTPS Proxy is working, no HTTPS Inspection in General Topics

How do I confirm if the Transparent HTTP/HTTPS Proxy is working, no HTTPS Inspection

Anthony_Vita — Tue, 08 Oct 2019 13:55:46 GMT

I believe I've configured the Transparent HTTP/HTTPS proxy correctly, but was wondering how I can see this in the logs. running R80.10

Re: How do I confirm if the Transparent HTTP/HTTPS Proxy is working, no HTTPS Inspection

Nick_Doropoulos — Tue, 08 Oct 2019 17:26:39 GMT

Hi Anthony,

You can filter by proxy_src_ip address as shown below:

I hope it helps.

Re: How do I confirm if the Transparent HTTP/HTTPS Proxy is working, no HTTPS Inspection

Anthony_Vita — Tue, 08 Oct 2019 18:57:23 GMT

Thanks for the reply. I do not see any logs using the syntax proxy_src_ip:x.x.x.x 80 and 443 traffic is still working to the internet though and appears in normal FW logs

Re: How do I confirm if the Transparent HTTP/HTTPS Proxy is working, no HTTPS Inspection

Maarten_Sjouw — Tue, 08 Oct 2019 21:09:22 GMT

When you say transparent proxy, you mean that no proxy is configured on the clients and the proxy setting on the gateway is disabled, right?
The only way to see if HTTPS traffic is not handled by the gateway is by looking at the certificate that you get on the clients, which is then signed by the original site.
When you enable HTTPS decryption you need to install a certificate CA on the gateway that is trusted by the clients and enable HTTPS scanning on the gateway. Now the certificate will be issued by the gateway not by the original site.