Users might encounter public or private web sites running on non-standard ports, for example:
When these web sites are accessed via a ProxySG appliance transparently, the ports are not set to intercept transparent connections by default. As a result, the requests are bypassed by the proxy and an upstream device (firewall) blocks access from the client's IP.
Intercept these custom ports by using the appropriate service type. For the previous example URLs, which are HTTP, the service type should be “http”.
These steps ensure that the appliance is intercepting those ports also with respective proxy service (in this case it is “HTTP”). You must also open the firewall or any upstream devices to allow the appliance's IP address to communicate on the respective ports.
Note: If you are using WCCP for redirecting the connections, also add the ports to the WCCP service group so that the WCCP server passes them to the appliance.