Forward Web Traffic to Cloud Proxy - Websense

[17g]

Hi  I have a cloud based web filtering proxy service called Force Point (Previously Websense). Local PCs managed by group policy are redirected to the proxy via Internet Explorer settings. I would like to make sure wireless traffic is also redirected to the cloud proxy however allot of the wireless devices are users personal mobile phones etc so I cant managed local browser settings. Is there a way I can forward the following: Wireless traffic HTTP 80 -> 85.115.33.180 - 8081 Wireless traffic HTTP 443 -> 85.115.33.180 - 8443 A simple guide can be found here on what I am trying to do. https://www.websense.com/...fw_redirect/first.aspx What would the best way be to achieve this? I looked at Policy Routes but I cant see a way in the policy to redirect the ports to what the cloud proxy is accepting ie 80 - 8081 Many thanks Tom

[TuncayBAS]

Hi,

As can be done with VIP. Modify the following lines according to your own design and test them from inside to out.

config firewall vip
  edit "proxy-vip-80"
    set type load-balance
    set src-filter "192.168.1.1-192.168.1.254" --> your internal network
    set extip 0.0.0.0-239.255.255.255
    set extintf internal
    set portforward enable
    set mappedip "85.115.33.180"
    set protocol tcp
    set extport 80
    set mappedport 8081
    set arp-reply disable
  next
  edit "proxy-vip-443"
    set type load-balance
    set src-filter "192.168.1.1-192.168.1.254" --> your internal network
    set extip 0.0.0.0-239.255.255.255
    set extintf internal
    set portforward enable
    set mappedip "85.115.33.180"
    set protocol tcp
    set extport 443
    set mappedport 8443
    set arp-reply disable
  next
end