For outbound connections to go through a web proxy server from the Unified Access Gateway to the desired host over the Internet, you must configure the Outbound Proxy Settings in the Unified Access Gateway Admin UI.

Unified Access Gateway does not support proxy server authentication.

In this release of Unified Access Gateway, the Outbound Proxy Settings are supported only for outbound connections to OPSWAT and the file server (used when the on-demand agent executable file is uploaded to Unified Access Gateway by using the URL Reference upload type). When outgoing traffic from Unified Access Gateway is for an OPSWAT host, then such a connection must first go through the web proxy server.

The following procedure describes the Outbound Proxy Settings configuration:

Procedure

  1. Log in to the Admin UI and in the Configure Manually section, click Select.
  2. Go to Advanced Settings > Outbound Proxy Settings and click the gear box icon.
  3. In the Outbound Proxy Settings window, click Add.
  4. Enter the following information:
    Option Default and Description
    Name Multiple proxy settings can be added in the Admin UI. This text box acts as a unique identifier for every proxy setting.
    Note: This text box is mandatory and cannot be updated.
    Proxy Server URL

    Outbound connections from Unified Access Gateway go through the proxy server, which is mentioned in this text box and then to the desired host over the Internet.

    Value of this text box must either be a hostname or an IP address prefixed with either HTTP or HTTPS.
    Proxy Included Host

    Outbound connections for the host mentioned in this text box must go through a proxy server from the Unified Access Gateway to the host over the Internet.

    Value of this text box must either be a hostname or an IP address.

    Note: If OPSWAT or the file server is the host, then the corresponding hostname must be configured in this field.
    Trusted Certificates

    Click '+' to select a certificate in PEM format and add to the trust store. Click "-" to remove a certificate from the trust store. By default, the alias name is the filename of the PEM certificate. To provide a different name, edit the alias text box.
  5. Click Save.