Configure EdgeSWG (ProxySG) to resolve website via host file entry

Products

• ProxySG Software - SGOS
• ISG Proxy

Issue/Introduction

The ProxySG does not support the use of a hosts file. However the ProxySG does offer a way of simulating such behavior by defining a forwarding host. 

This can be done via the CLI or the Admin Console

 

 

Resolution

1. To resolve an https website, create following policies through CLI:

ProxySG>enable
Enable Password:
ProxySG#config t
Enter configuration commands, one per line.  End with CTRL-Z.
ProxySG#(config)forwarding
ProxySG#(config forwarding)create host "Https_Server" <ip_address> tcp=443 ssl-verify-server=no server
  ok
ProxySG#(config forwarding)exit
ProxySG#(config)exit

If you would like to resolve an http site, create follow forwarding host instead:

create host HTTP_server <ip_address> http=80 server

2. Create a policy rule to forward to that host:

<forward>
server_url.domain=www.example.com forward(Https_Server)

Or if using HTTP host

<forward>
server_url.domain=www.example.com forward(Http_Server)

These are the steps using Admin Console

1. Configuration

2. Forwarding Hosts

3. Add Host

4. Click Apply

5. If you would like to resolve an http site, create following forwarding host instead

6. Click Apply