Quick reference - HTTPS proxy configuration steps - explicit mode

Products

• ProxySG Software - SGOS

Issue/Introduction

Quick reference - HTTPS proxy configuration steps - explicit mode

 

Resolution

Step 1 - Access the ProxySG Management Console

Open Web browser -> access "https://<SG_IP>:8082"

 

 

Step 2 - Configure the ProxySG Appliance to intercept HTTP traffic

Select "Configuration Tab" -> "Services" -> "Proxy Services"

Expand "Standard" -> Select "ALL Explicit:8080" -> change "Bypass" to "Intercept"

Click Apply to save the configuration.

Click "OK" to close the following dialog box.

 

Step 3 - Enable protocol detection on the HTTP Proxy service

Select "Explicit HTTP" => Click "Edit Service"
**NOTICE: not "ALL -> Explicit:8080" but "Explicit HTTP"

The following dialog box displays:

Select "Detect Protocol" and click OK to close the dialog box.

To save your changes, click "Apply."

Click "OK" to close the following dialog box.

 

Step 4 - Configure policy to enable HTTPS traffic interception 

To Open  Visual Policy Manager, select "Configuration Tab" -> "Policy" -> "Visual Policy Manager" -> click "Launch."

The following dialog box displays:

Select "Policy" -> "Add SSL Intercept layer ..."

The Add New Layer dialog displays. Set the Layer Name, if you want a name other than the default, and then click OK to close the dialog box.

The SSL Intercept Layer now appears in the Visual Policy Editor.

In the Action column select "None"  -> mouse right click -> Select "Set ..."

The Set Action Object dialog box displays.

Click New -> Select "Enable HTTPS Interception..."

The Add Enable HTTPS Interception Object dialog box.

Change the name and configuration, if you want. After that, Click OK to close this dialog. The new action object has been added to the Set Action Object dialog box.

 

Click OK to close this dialog box.

Now you can see new SSL intercept action has been added. To apply policy, Click "Install policy."

 You can see below dialog box.

Policy installed successfully. You can close Visual Policy Manager now. Select "File" -> "Exit"

 

 

The ProxySG appliance is now configured to intercept HTTPS traffic.