how firewall section and proxy section affect on each other

[Guest]

[kikilinux]

Hi
Maybe i have a miss understanding from firewall functionality with proxy
I want to enable proxy and for example block http traffic from green zone to DMZ zone, can i perform this ?
Do i say right, when i use proxy then i can't filter traffic by firewall ?

best

[kikilinux]

nobody can answer my question
can we use http proxy and firewall together ?
when we use transparent http proxy then we can't use firewall in inter-zone or outgoing state ?

anybody knows ?
best

[jfinnigan]

Yes, you can. I think you are missunderstanding the purpose of a proxy/content filter and a firewall. They work at different layers in the OSI model. A firewall works at layer3 and stops or allows traffic bases on ACLs and their associated ip addresses and port numbers. It doesn't care or know what's inside those packets. A firewall would be what you use to stop or allow access to a particular network. The proxy content filter is what you'd use to block users from access certain internet websites.   

Hope that helps.