Skip to main content

Posts

Showing posts from December, 2017

Zscaler and Transparent proxying - Part 2

.... Next step was to configure the Linux OS to NAT port 80 to the proxy port [default is 3128] http://www.tldp.org/HOWTO/TransparentProxy-5.html iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 80 -j REDIRECT --to-port 3128 A quick test to verify whether the above is working was to change the proxy port in the browser to 80 confirmed that the rule was applied and working just as intended. Having verified Squid configuration, I had to find a way to route traffic to the squid server transparently. This could have been achieved by doing policy based routing on the firewall or a more efficient option is to use the WCCP protocol [if your network devices support] This required certain changes on the Squid server, as well as the routers on my network. As per Squid's documentation  here , both WCCP V1 and V2 are supported by the latest version of Squid. Configuration example  from Cisco's website shows how WCCP can be enabled on L3 switches Once WCCP...