explicit-proxy – a family of commands for configuring the HTTP proxy server of NGFW

explicit-proxy

Go to proxy server configuration submenu.

explicit-proxy> [no] enable

Enable (or disable if no) the proxy server.

explicit-proxy> ip-address <address>

Configure the IP address for client connections to the proxy server.

explicit-proxy> [no] extended-settings

Enable (or disable if no) extended proxy server settings.

After enabling extended settings, the settings from the separate /etc/squid/extended.conf file take effect. If it is necessary to use explicit-proxy settings that cannot be managed on the command line, the administrator uploads this file to the device at the specified path. The file must contain directives in the configuration file format of the Squid caching proxy.

Example configuration file with settings for blocking access to a host with IP address 192.168.1.12:

acl blocked_host dst 192.168.1.12
http_access deny blocked_host

explicit-proxy> [no] user-authentication

Enable (or disable if no) proxy server user authentication.

explicit-proxy> add-user <username>

Add proxy server user account.

explicit-proxy> del-user <username>

Delete proxy server user account.

show explicit-proxy status

Get status information for proxy server.

Example output:

ngfw> show explicit-proxy status
{
  "ngfw-explicit-proxy:explicit-proxy": {
    "state": true,
    "enable": true,
    "connection": {
      "ip-address": "10.0.0.1",
      "port-number": 3128
    }
    "user-authentication": true,
    "extended-settings": false
  }
}

show explicit-proxy settings

Get information about proxy server settings.

Example output:

ngfw> show explicit-proxy settings
{
  "ngfw-explicit-proxy:explicit-proxy": {
    "enable": true,
    "connection": {
      "ip-address": "10.0.0.1",
      "port-number": 3128
    }
    "user-authentication": true,
    "extended-settings": false
  }
}

show explicit-proxy users

Get a list of proxy server users.

Example output:

ngfw> show explicit-proxy users
alice
bob

| Prev | Home | Next |