Table of Contents
Advertisement
The example assumes the following configuration of the proxy server:
So the proxy server responds on port 3128.
Make the following settings in avwebgate.conf (example):
Configure the other proxy server, so that it does not directly serve inquiries to
the Internet, but directs them to WebGate (e. g. port 8080). This port must
correspond to the value of HTTPPort in avwebgate.conf .
– Example for a Squid proxy server:
If WebGate is installed on the proxy server machine:
Make sure that WebGate and the proxy server do not respond on the same
server ports, such as is the case in the above example.
When a Client asks for data, which can be found on the proxy server's cache, it will receive
its data directly from there. These data will not be scanned, until the cache is emptied. It
bears a risk, because a new virus might "penetrate" and it could be forwarded to Clients,
even if they have updated VDFs.
If you modify the proxy server's port, you have to adapt the settings of the Clients'
browsers, which access the proxy.
It is usually easier to keep the proxy settings and to adapt the WebGate settings, just like
in the above example.
4.3
Monitoring FTP Traffic
WebGate can also be set as real FTP proxy, so that it can scan the files transferred
through an FTP Client and even block them. It scans both downloads and uploads.
In avwebgate.conf set the port for the WebGate to communicate with the FTP
Clients:
Now, the FTP Clients can communicate to FTP servers, through WebGate, which
30
host
serverport
HTTPPort
In this configuration, you must first start WebGate and then the proxy server.
Squid proxy has to direct all inquiries to WebGate (parent proxy), so you have
to configure the Squid configuration file squid.conf as follows:
cache_peer proxy.mycompany.com parent 8080 0 no-query
no-digest default
acl all src 0.0.0.0/0.0.0.0
never_direct allow all
FTPPort 2121
AntiVir WebGate
proxy.mycompany.com
3128
8080
Configuration
Avira GmbH
Advertisement
Table of Contents
