now i use my Checkpoint cluster as a corporate non transparent proxy server. Additionally to that i use it as a vpn server for my remote access users. Now my current task is configure so my remote access users can use my proxy server to reach internet resouces according to the Access Policy on my cluster. in case If i define internal interfaces ip address of cluster as a proxy (on my vpn users browser settings) - web pages cannot be displayed. in case if i define external interfaces ip address of cluster as a proxy (on my vpn users browser settings) - users can open web pages, but they have unlimited access to internet (access not restricted according to Access Policy on my cluster).
how to solve this task?