Web Proxy
Focus
Focus
Next-Generation Firewall

Web Proxy

Table of Contents

Web Proxy

Configure a web proxy for your cloud-managed firewalls.
Contact your account team to enable Cloud Management for NGFWs using Strata Cloud Manager.
If you have an AIOps for NGFW Premium license and you use a proxy device to secure your network, you can configure an explicit web proxy on your cloud-managed firewalls.
Using an in-app proxy auto-configuration (PAC) file editor, you can edit your proxy settings and modify your PAC file all in one place whenever network changes arise.
Currently, cloud-managed firewalls support only the explicit proxy connection method, where the connection request contains the destination IP address of the configured proxy and the client browser sends requests to the proxy directly. You can use one of following methods to authenticate users with the explicit proxy:
  • Kerberos, which requires a web proxy license.
  • SAML 2.0, which requires Panorama, a Prisma Access license, the Cloud Services 3.2.1 plugin (and later versions), and the add-on web proxy license.
You can push web proxy configurations to the following platforms:
  • PA-1400
  • PA-3400
  • VM Series (with a minimum of four vCPUs)
  • Panorama using PAN-OS 11.0