ProxySG SWG Setup Guide: Initial Install


Article ID: 166826


Updated On:


ProxySG Software - SGOS



ProxySG SWG Setup Guide: Initial Install
This document assumes a ProxySG in factory-default state. Use “restore-defaults factory” from the serial console enable mode to reset a device. After completing these steps the proxy will be configured as an HTTP proxy allowing all requests.
Physical Deployment steps:
For inline deployments, connect the client-side of the network to the interface labeled “LAN” and the “WAN” interface to the network path for the internet. In explicit proxy only deployments, connect the “LAN” interface to any switch in the network.
  1. Connect the powered-off unit’s bridge card between the testing client(s) and the rest of the network. This is done with the power off to confirm the cabling is correct for fail-to-wire behavior.
  2. Power-on the ProxySG to proceed with configuration.
Serial Console steps:
Connect the provided null-modem cable to the ProxySG’s serial port and use a terminal emulator with the settings: 9600bps, 8-bits, 1-stop-bit, and no flow-control.
  1. Press the “Enter” key three times to activate the serial console.
  2. Select manual configuration by typing “M” and pressing enter.
  3. Choose interface 0 of the proxy’s hardware bridging card.
  4. Do not configure a non-native VLAN IP in simple evaluations.
  5. Answer the questions provided to set basic network connectivity.
  6. Set the administrative username, password, and enable password.
  7. Answer “No” to the questions about securing the serial port and restricting workstation access.
After the message “Management Console started” is displayed the system is on the network and ready for GUI access.

 HTTPS Web GUI steps:

The following configurations are performed using a web-browser to access the ProxySG’s management console (https://x.x.x.x:8082/). Only click “Apply” after completing all steps to avoid denying traffic with intermediate configurations.
  1. Login to the GUI using the administrator credentials.
  2. Select “Management Console” from list of links on the left-hand side of the page.
  3. Verify the Health indicator in the upper-right of the GUI is green “OK”. If not click the word in it’s place to view the health-status details. Correct the alert cause before proceeding.
  4. Choose the “Configuration” tab.
SGOS by default uses auto-negotiation on its network interfaces. Miss-matched speed and duplex between the proxy and other devices can lead to slow end-user performance so the following instructions describe manually setting these. Some combinations of equipment (particularly using Gigabit-Ethernet) do not need manual speed/duplex configurations and steps 5-11 can be skipped.
  1. Browse to: Configuration -> Network -> Adapters.
  2. Select the interface 0 of the bridge-card (labeled “WAN”).
  3. Click the “Interface Settings” button.
  4. Set the appropriate link speed and duplex for the “Link Settings” (lower left in the window). 
  5. Select the other of the bridge-card (“LAN”).
  6. Click the “Interface Settings” button.
  7. Set the appropriate link speed and duplex for the “Link Settings”. 
  1. Browse to: Configuration -> Services -> Proxy Services.
  2. Expand the “Standard” group.
  3. Set the HTTP service to “Intercept” for both <all>:80 and <all>:8080. 
  1. Browse to: Configuration -> Policy -> Policy Options.
  2. Select “Allow” for the “Default Proxy Policy”.
When the above GUI configurations are complete click “Apply” to save these settings to the ProxySG.