Web Proxy for Cloud-Managed Firewalls
Focus
Focus
What's New in the NetSec Platform

Web Proxy for Cloud-Managed Firewalls

Table of Contents

Web Proxy for Cloud-Managed Firewalls

You can now configure a web proxy for your cloud-managed firewalls.
Prisma® Access has its own, separate method of configuring explicit proxy. This new feature applies only to cloud-managed firewalls.
To consolidate management, you can now configure a web proxy on the firewalls you're managing with. This means that if you use an NGFW as a proxy device to secure your network, you can configure your proxy settings across your deployment from a single management interface.
This interface includes an in-app Proxy Auto-Configuration (PAC) file editor so that you can edit your proxy settings and modify your PAC file all in one place whenever network changes arise.
The web proxy supports two methods for routing traffic:
  • Explicit Proxy— The request contains the destination IP address of the configured proxy, and the client browser sends requests to the proxy directly. Authentication methods such as Kerberos and SAML 2.0 are supported, requiring the appropriate web proxy licensing.
  • Transparent Proxy—The request contains the destination IP address of the web server and the proxy transparently intercepts the client request (either by being in-line or by traffic steering). This method requires specific networking prerequisites, including a loopback interface, User-ID configuration in the proxy zone, and specific Destination NAT (DNAT) rules defined in Strata Cloud Manager. Transparent proxy does not support X-Authenticated Users (XAU) or Web Cache Communications Protocol (WCCP).
You can push web proxy configurations to the following platforms:
  • PA-1400
  • PA-3400
  • VM-Series (with a minimum of four vCPUs)