SunScreen 3.2 Administration Guide

HTTP Proxy Service


Note -

User authentication does not apply.


The following information is used in this example:

Backend HTTP Server name

gobaby

Backend HTTP Server URL

gobaby/Sun.Net

SunScreen proxy name

sunscreen_fw

Client machine name

tiny

To Set Up the SunScreen Environment
  1. Disable the HTTP daemon (for example, httpd), if it is running.

  2. Type the following to make sure the backend HTTP Server is accessible:


    ping -s gobaby 
    

  3. Add an entry in the /etc/hosts file if it is accessible. For example:


    1.2.3.4 gobaby
    

To Configure the HTTP Proxy Service
  1. Create the Proxy User:

    1. In the Common Objects section, select Proxy User from the Type list.

    2. Select New from the Add New list.

      The Proxy User dialog box appears.

    3. Type a name for this Proxy User in the Name field, for example:


      pu1
      

    4. Leave the Authorized User Name field blank.

    5. Leave the Backend User Name blank.

    6. Click the OK button.

  2. Create a Policy Rule:

    1. Click the Add New button in the Policy Rules area of the Policy Rules page.

      The Rule Definition dialog box appears.

    2. Select the following values for each field:

      Service

      http

      Source address

      *

      Destination address

      *

      Action

      ALLOW

      PROXY list

      PROXY_HTTP

      Cookies, ActiveX, Java, and SSL

      ALLOW/DENY

    3. Click the OK button.

  3. Save the changes:

    1. Click the Verify Policy button.

    2. Click the Save Changes button.

  4. Test the HTTP Proxy service

    From the client machine:

    1. Make sure the physical connections are good.

    2. Make sure the client machine can access the SunScreen proxy:


      ping -s sunscreen_fw
      

    3. Configure the browser to use the HTTP proxy:

      HTTP Proxy

      sunscreen_fw

      Port

      80

    4. Type the following URL:


      http://gobaby/Sun.Net
      

The screen output appears on the web page.