Smoothwall transparent proxy mode

[Nathaniel]

Hi,

 

I was wondering how a Smoothwall appliance works in transparent mode without any client configuration? All our wireless devices get DHCP addresses and then users have to manually configure the proxy address. How and where would we deploy an appliance where we could set a manual proxy for our owned network devices but then BYOD devices we want to auto connect via transparent mode with SSL login page with there AD credentials.

[glennda]

You would need to setup the Smoothwall to be the default gateway - it can then have rules to setup SSL login page from transparent connections and then have all your networked machines controlled VIA pointing to non-transparent port and use NTLM. Works here and I know thats the way others have it setup.

 

Toby

[Nathaniel]

So can the Smoothwall be configured with various IP addresses on different ports. Our wireless devices are on a different vLan with different default gateways to that of other devices. So we could set the transparent port to be the default gateway of the wireless vlan? and then have another port for our LAN traffic which we can give an address which becomes the proxy address of our owned machines.

[glennda]

Yes you should be able to setup multiple Internal Interfaces but you can also do it with a single NIC (as I do)

 

The way we have ours setup is as follows

One External WAN Nic

One Internal Lan Nic

All Vlans have the Default Gateway of our Core switch which the routes any unknown Traffic to the Smoothwall, you would just need to setup the routes on the smoothwall so it knows where to route the internal traffic. Traffic is controlled VIA the ACLs on the Switch.

[Nathaniel]

Yes you should be able to setup multiple Internal Interfaces but you can also do it with a single NIC (as I do)

 

The way we have ours setup is as follows

One External WAN Nic

One Internal Lan Nic

All Vlans have the Default Gateway of our Core switch which the routes any unknown Traffic to the Smoothwall, you would just need to setup the routes on the smoothwall so it knows where to route the internal traffic. Traffic is controlled VIA the ACLs on the Switch.

 

Then i presume the smoothwall routes non local traffic to your firewall?

[glennda]

Then i presume the smoothwall routes non local traffic to your firewall?

 

Kind of - We have the Advanced Firewall so it is the Firewall as well as Filter

[dave.81]

I'm starting to look at this option for our BOYD system, with laptops we have instructions sheets but the same system wont work with tablet devices.

 

Am i thinking this right, our default gateway on DHCP is set to SW, setup the transparent policy to redirect users to SSL page and magically all works?

[glennda]

In theory Yes!