Endian Knowledge Base
Search:     Advanced search
Browse by category:

How can I make my Browsers automatically use the Endian Firewall HTTP Proxy in non-transparent mode?

Add comment
Views: 11478
Votes: 0
Comments: 0
Posted: 09 Mar, 2007
by: Warasin P.
Updated: 04 Dec, 2008
by: Warasin P.
You can let the browsers get the proxy configuration automatically. Only precondition is, that you roll out the browsers with "Auto-detect proxy settings" enabled, which is default for both Firefox and Internet Explorer.

If you use the DHCP server or DNS proxy (or both) of Endian Firewall, there is no more to do. Otherwise you have two possibilities to make your clients find the proxy configuration on Endian Firewall:

  1. Add a hostname to your local DNS called "wpad" and make it point to the Endian Firewall. You then should be able to reach Endian Firewall by accessing http://wpad/, otherwise it will not work.
  2. Add a custom option to your DHCP server in order to make it push the wpad url with the other DHCP information.
    Example for ISC DHCP server:

    Global option:

    option wpad code 252 = text;

    Option for each subnet configuration:

    option wpad "http://YOUR_EFW_IP_ADDRESS/proxy.pac";

    Replace YOUR_EFW_IP_ADDRESS with the zones respective IP address of your Endian Firewall.
Note: If you like to force your users to use the proxy, you need to block HTTP ports within the outgoing Proxy. Otherwise a user may disable the Proxy within his/her browser and simply go directly without being blocked.
Others in this Category
document Why do some internet based games and applications fail to connect behind Endian Firewall?
document Why do the proxy graphs not work?
document How to configure the HTTP Antivirus whitelist?
document OpenVPN does not push routing information to clients after i changed some
document How do I configure the OpenVPN client on a Windows workstation?
document How to configure Endian Firewall in order that a network connected behind a router behind green can also be handled?
document HTTP Proxy gives "Error fetching group names" when downloading groups from the Windows Active Directory
document How to exclude specific sites from content filter?
document Can I train the Antispam Engine?
document I configured my 2 firewalls for High Availability now I can't connect to my slave firewall anymore. What can I do?
document Common pitfalls with Active Directory (Windows) authentication configuration with HTTP Proxy
document How to configuer dansguardian white- /blacklists?
document How to exclude specific sites from Antivirus scanning
document How to configure domains without http authentication?
document IPSEC interoperability matrix
document Why Port Forwarding does not work?
document How do I configure the OpenVPN client on a Linux workstation?
document How to configure LDAP authentication with openvpn server
document How to block specific web sites?
document How can I forward spam mail to a specific email address?
» More articles



RSS