How do I classify traffic by domain name when I am behind a proxy server?

Products

• PacketShaper

Issue/Introduction

When you configure a client in a web proxy environment, you must provide the proxy address and port number in the client's browser.

This means all requests will go directly to the proxy.

So, if you classify the traffic by domain name, it will not work since PacketWise will resolve the domain name to the address of the web server and not the address of the proxy server.

Resolution

Solution:

Create a matching rule using the Criterion field, which is for layer seven classification. Basically, this allows PacketWise to look deeper into the packet.

To create a class by domain name in this situation, see the following example:
Protocol: IP
Service: HTTP
Location: Any
Outside column, Address: enter proxy server address
Criterion: Select Host DNS Name or IP Address and enter the domain name (for example, www.yahoo.com )

Copy the class to the Outbound branch of the tree.

NOTE: 
PacketShaper/AppVantage behind the proxy server is not a recommended topology because proxy servers terminate TCP connections; rate control will not work effectively in this topology.

For more information about creating classes, see Create Web Classes in PacketGuide.