Cisco ASA 5505 Configuration Manual page 1492

Configuring Proxy Bypass
•
•
•
Use an HTTPS proxy server—Click to use an external HTTPS proxy server.
•
•
•
•
•
•
Modes
The following table shows the modes in which this feature is available:
Firewall Mode
Routed
•
Configuring Proxy Bypass
You can configure the adaptive security appliance to use proxy bypass when applications and web
resources work better with the special content rewriting this feature provides. Proxy bypass is an
alternative method of content rewriting that makes minimal changes to the original content. It is often
useful with custom web applications.
You can configure multiple proxy bypass entries. The order in which you configure them is unimportant.
The interface and path mask or interface and port uniquely identify a proxy bypass rule.
Cisco ASA 5500 Series Configuration Guide using ASDM
67-28
UserName—(Optional) Enter this keyword to accompany each HTTP proxy request with a
username to provide basic, proxy authentication.
Password—Enter a password to send to the proxy server with each HTTP request.
Specify PAC file URL—As an alternative to specifying the IP address of the HTTP proxy server,
you can choose this option to specify a Proxy autoconfiguration file to download to the browser.
Once downloaded, the PAC file uses a JavaScript function to identify a proxy for each URL. Enter
http:// and type the URL of the proxy autoconfiguration file into the adjacent field. If you omit the
http:// portion, the adaptive security appliance ignores it.
Specify IP address of proxy server—Click to identify the HTTPS proxy server by its IP address or
hostname.
IP Address—Enter the hostname or IP address of the external HTTPS proxy server
Port—Enter the port that listens for HTTPS requests. The default port is 443.
Exception Address List— (Optional) Enter a URL or a comma-delimited list of several URLs to
exclude from those that can be sent to the HTTPS proxy server. The string does not have a character
limit, but the entire command cannot exceed 512 characters. You can specify literal URLs or use the
following wildcards:
– * to match any string, including slashes (/) and periods (.). You must accompany this wildcard
with an alphanumeric string.
– ? to match any single character, including slashes and periods.
– [x-y] to match any single character in the range of x and y, where x represents one character and
y represents another character in the ANSI character set.
– [!x-y] to match any single character that is not in the range.
UserName—(Optional) Enter this keyword to accompany each HTTPS proxy request with a
username to provide basic, proxy authentication.
Password—Enter a password to send to the proxy server with each HTTPS request.
Security Context
Transparent Single
— •
Multiple
Context System
— —
Chapter 67 Clientless SSL VPN
OL-20339-01