Migrating From Proxy Cache To Transparent Cache Mode; Deploying The Superstack 3 Firewall As A Proxy Forwarder - 3Com SuperStack 3C16115 User Manual

Migrating from Proxy
Cache to Transparent
Cache Mode
Deploying the
SuperStack 3 Firewall
as a Proxy Forwarder
If the Webcache fails, the Layer 4 device will detect the failure and
redirect Web requests to the WAN, if the device supports Webcache
health-checks, ensuring that access to the Web is maintained.
Deploying the Webcache in Transparent mode has benefits for the
security of your network. It ensures that only client machines that are
inside your network can access the systems and resources within it. This
eliminates the need for serious access controls.
Client machines with Web browsers that are configured to use the
Webcache as a Proxy Cache (either directly or through Browser
Auto-Configuration) can continue to use the Webcache as a Proxy Cache
if you change the Webcache to a Transparent Cache deployment. This
allows you to gradually migrate the client machines in your network from
a pure Proxy Cache configuration to a pure Transparent Cache
configuration, by changing the Web browsers to Transparent Cache
mode as required.
The following example describes how to install the SuperStack 3 Firewall
(3CR16110-9x) as a Proxy Forwarder. The network layout is shown in
Figure 11 below.
Figure 11 Deploying the Firewall and Webcache Together
Key:
SuperStack 3
F irewall
1 Install the Webcache as described in this Chapter, taking into account any
safety information.
a Install the Webcache on a Hub or Switch connected to the DMZ port
of the Firewall. Use the LAN port of the Webcache for this connection.
Deploying the Webcache in Your Network
Superstack 3 10/100 Mbps
Web ache c S witch
Router
Client PC
35