Bypassing transparent proxy problem for certain PCs...

[Guest]

[spotty69]

I'm running an EFW Community 2.3.0 for a small office with about 16 PCs.

3 of these PCs need to have full, unrestricted internet access, whereas the others need to be filtered to block sites such as Facebook.

I added the MAC addresses of the 'unrestricted' machines to the "Bypass transparent proxy from SUBNET/IP/MAC" section under "Bypass transparent proxy?" in HTTP Proxy Configuration (https://firewall:10443/cgi-bin/proxyconfig.cgi) - but these machines still remained restricted. I then added their IPs; same result.

Any ideas?

Thanks!!

[spotty69]

Anyone have any ideas about this??

Thanks.....

[whoiam55]

I don't know what is the problem you facing, but you could try putting a new rule in access profile, select the ip/mac you want not to filter and then select a virus filter only profile and you should be ok. make sure no other rules are conflicting with the rule you create.

[spotty69]

Well, I thought that was what I was doing - I put the MAC address (and IP, tried both) of the machine which should be unfiltered in the "Bypass transparent proxy" box - but it doesn't bypass it......

[whoiam55]

I put the MAC address (and IP, tried both) of the machine which should be unfiltered in the "Bypass transparent proxy"

That is what I was saying have no idea about

What I suggest is proxy > access profile > create a profile with virus filter only selected in the content filter section (you could leave it to none but I think virus filter should be applied to every connection subject to content filter or not)

[spotty69]

But can you make profiles on a per-machine basis? This is what I need - some machines filtered, others not.

Apologies if I'm being stupid, I'm not in front of the EFW at the moment, will be in an hour or so though.

Thanks for your help, it is appreciated.

[whoiam55]

Apologies if I'm being stupid, I'm not in front of the EFW at the moment, will be in an hour or so though.

you can take an  demo any time round the year

[gyp_the_cat]

Now don't quote me on this one, but I remember reading somewhere that the "Bypass the Proxy Filter" boxes are related to authentication only, as opposed to allow them clean through the filters.

You could always get people to logon to the proxy using the authentication and then have an unrestricted class.  Or have two proxies, one for the "rabble" and one for the "bosses" with different levels on them.  Not something I've done too much on, but our Information Governance requires virus filtering of all web traffic at the absolute very least.