Lab 5: SWG iApp - Transparent Proxy for HTTP and HTTPS
In this lab exercise, you will configure SWG in transparent proxy mode
to support environments where clients do not leverage an explicit proxy.
BIG-IP is deployed inline on the client’s outbound path to the Internet
to intercept the traffic.
Estimated completion time: 15 minutes
Objectives:
- Deploy SWG in transparent proxy mode
- Test web browsing behavior
Lab Requirements:
- Lab 1 previously completed successfully (working SWG iApp deployment)
- BIG-IP must be in path between the client workstation and the
Internet (this has already been done for you in this lab)
Task 1 – Create a new Access Policy
- Use Firefox to access the BIG-IP GUI (https://10.1.1.10, admin/admin)
- Browse to Access >> Profiles / Policies >> Access Profiles
(Per-Session Policies) and click Create…
- Name the profile AP_Transparent
- Change the Profile Type to SWG-Transparent
- Add English to Accepted Languages
- Accept all other default settings and click Finished
- Click on the Edit… link for the appropriate Access Policy
created above
- Go to the VPE tab in your browser and on the fallback branch,
click on the Deny Ending and change it to Allow
- Click Save
- Click Apply Access Policy
Task 3 – Testing
- Open Internet Explorer on your Jump Host client machine
- Ensure Internet Explorer options are configured to *not* use an
explicit proxy
- Browse to https://www.nhl.com. You should not be prompted for
authentication.