howto:how_to_configure_web_proxy_in_transparent_with_ssl_mode

How to configure “Web proxy” in “Transparent with SSL” mode.

Version: V1.0

Revision: R0

For: NethServer 6.7 (final)

Published: 2016-02-21

Review: 2016-02-21

Contact: Nethserver community forum

Description:

This “How-to” will present how to set *“Web proxy”* in *“Transparent with SSL”* mode for green zones and trusted networks and how to install the server certificate (CA) for transparent SSL mode which must be installed on each client to allow HTTPS traffic. In this mode, all HTTP and HTTPS traffic will be redirect through the proxy. All that is described in this guide was tested on NetServer 6.7 (final) updated.

Prerequisites:

Installed packages: *“Web proxy”* module from: NethServer GUI → *“Administration → Software center → Available → Firewall”*.

Bibliography and useful docs:

How-to:

1. Enable *“Proxy”*: NethServer GUI → *Gateway → Web proxy → Proxy tab* → select *“Enable proxy”*.

2. Enable *“Transparent with SSL”*: NethServer GUI → *Gateway → Web proxy → Proxy tab → Enable proxy → Mode for green zones and trusted networks* → select *“Transparent with SSL”*.

3. Download certificate for *“Transparent with SSL”* proxy mode: NethServer GUI → *Gateway → Web proxy → Proxy tab* → right click on *“http://your_ip/proxy.crt“* → select *”Open Link in New Tab”* → save the certificate.

4. Import the certificate as *“Trusted Authorities”* on used browser(s).

5. Done.

HINT:

  • the certificate can be saved on USB to be installed later on each client
  • any other known method for deploying the certificate to the clients can be used.

Known issues by me:

* if you have installed any AV software that can scan SSL, disable this option (sure with Bitdefender but is possible and with other AV software). ( http://community.nethserver.org/t/facebook-blocking/2526/29 )

* when *“Transparent with SSL”* proxy mode is used in combination with *“Web content filter”*, it's possible to have the following situation as described here: http://community.nethserver.org/t/facebook-blocking/2526/28

* when *“Transparent with SSL”* proxy mode is used in combination with *“Web content filter”* to block social media sites, it's possible to have the following situation as described here (normal situation from my point of view): http://community.nethserver.org/t/facebook-blocking/2526/30

  • howto/how_to_configure_web_proxy_in_transparent_with_ssl_mode.txt
  • Last modified: 2016/02/22 17:01
  • by Alessio Fattorini