Solved

Network fundamentals

Posted on 2014-01-16
4
403 Views
Last Modified: 2014-01-31
I have inherited a network that has a proxy appliance. One side of the proxy appliance is plugged into the LAN and the other into the Firewall. Some of the client machines on the network are configured with proxy details in their browser and everything works as normal.

Some of the users do not have proxy details but they can still get out on the web. They are using a default gateway of the router that is attached to the proxy appliance. Regardless of what way the proxy appliance is setup I am confused as to how the users can even find the firewall!  even if the proxy appliance is incorrectly configured and wide open I would have thought no one should be able to contact the firewall as it is not directly plugged into the LAN.

Any ideas how I can see how this is occuring. I have checked arp tables wireshark etc.
0
Comment
Question by:Sid_F
4 Comments
 
LVL 26

Assisted Solution

by:pony10us
pony10us earned 150 total points
ID: 39785845
If the firewall is physically isolated (only connection is to the proxy appliance) then it is not possible to bypass the proxy.  Even though the information is not supplied in the browser settings.

If you have the proxy blocking/filtering a specific website then try to get to that site both with the proxy settings in place and not. You should be blocked both ways.
0
 
LVL 8

Accepted Solution

by:
Surrano earned 200 total points
ID: 39786678
sounds like the proxy acts as an ordinary gateway between LAN and the firewall. Try to traceroute (*nix) or tracert (windows) the firewall's IP and check the routing tables as well on a machine that "bypasses" the proxy and see how it is routed.
If it is routed through the proxy then the proxy acts as a gateway (it shouldn't).
If it is routed through different nodes then you'll see where to look for the gateway.
If the gateway is accessed directly (i.e. listed as first and only hop in traceroute) then it is on the same LAN as the clients and whatever switches/routers are in place should segregate them.
0
 
LVL 8

Assisted Solution

by:amatson78
amatson78 earned 150 total points
ID: 39794432
I would recommend running Packet Captures on the firewall and proxy appliance to see if and how traffic is flowing through the proxy. What type of proxy appliance is this? Are there any other cable terminations from the firewall to the LAN? The proxy may just be routing traffic, what is the route table of the proxy?

Cheers,
Alan
0
 
LVL 6

Author Closing Comment

by:Sid_F
ID: 39823834
Thanks
0

Featured Post

Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Data center, now-a-days, is referred as the home of all the advanced technologies. In-fact, most of the businesses are now establishing their entire organizational structure around the IT capabilities.
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question