Exclude administrative downloads from matching Forwarding policy on ProxySG and ASG

Article Id: 169229
Status: Published
Updated On: 13-01-2020 13:42
Legacy Id: TECH246083
Products:
Asset Management Solution Data Center Security Monitoring Edition Advanced Secure Gateway Software - ASG ProxySG Software - SGOS
Issue/Introduction:

In a chaining proxy environment, how can downstream proxy administrative download traffic (such as WebFilter, CachePulse, Appliance Certificate Request, License Key Automatic Installation, et c.) be forced to go direct to the internet without being forwarded to an upstream Symantec ProxySG or Advanced Secure Gateway (ASG)?

Resolution:

The following option will ensure a downstream proxy to connect directly to the Internet for administrative download

  1. From Management Console GUI, select Configuration tab > Forwarding > Forwarding Hosts > Global Defaults tab
  2. Configure the General Settings and uncheck the Use forwarding for administrative downloads option
  3. This option is enabled by default once the Forwarding host is created

The prerequisite is that the downstream ProxySG and ASG must be able to perform DNS lookup directly towards external Symantec domains.