1-888-77-Kerio
Home » Categories » Kerio Control » Proxy server
Icon Printer Icon Email      Icon Twitter Icon Digg Icon Stumbleupon Icon de.icio.us Icon FaceBook

Configuring proxy server

Why use a proxy server in Kerio Control

Even though the NAT technology used in Kerio Control enables direct access to the Internet from all local hosts, it contains a standard non-transparent proxy server. There are several reasons to use it:

  1. You want to filter HTTPS properly.

    HTTPS filtering of URLs is limited only to the domain name without non-transparent proxy server.

  2. Kerio Control is deployed within a network with many hosts where proxy server has been used. It would be too complex and time-consuming to re-configure all the hosts.

    The Internet connection functionality is kept if proxy server is used — it is not necessary to edit configuration of individual hosts (or only some hosts should be re-configured).

The proxy server can be used for HTTP, HTTPS and FTP protocols. Proxy server does not support the SOCKS protocol.

Configuring a proxy server

  1. In the administration interface, go to Proxy Server.

  2. Select option Enable non-transparent proxy server.

    This option enables the HTTP proxy server in Kerio Control on the port inserted in the Port entry (3128 port is set by the default).

  3. If you want to enable a tunnelled connection on non-standard TCP port (e.g. connecting to remote Kerio Control administration placed in the Internet from your local network), select option Allow tunnelled connections to all TCP ports.

    This option affects HTTPS traffic only. You can always access HTTP on any port via non-transparent proxy.

  4. Click Apply.

Configuring browsers

If you want to communicate through non-transparent proxy server, you must configure web browsers on client hosts. You have several options for this configuration:

  • configure browsers manually: to proxy server settings in the browser, type the IP address or DNS name of the proxy server and port (3128 is the default port for Kerio Control)

  • switch the mode for automatic proxy configuration script to Kerio Control non-transparent proxy server and add to browsers settings the following address:

    http://192.168.1.1:3128/pac/proxy.pac

    where 192.168.1.1 is the IP address of the Kerio Control host and number 3128 represents the port of the proxy server (see above).

  • check Allow browsers to use configuration script automatically via DHCP server in Kerio Control

    All browsers must have to check Automatically detect settings in the proxy server settings.

The automatic configuration of browsers may take several hours. Browsers have to ask for a new configuration.

Proxy server configuration on browsers: Google Chrome vs.
			 Firefox

Proxy server configuration on browsers: Google Chrome vs. Firefox

Forwarding to parent proxy server

  1. In the administration interface, go to Proxy Server.

  2. Select option Use parent proxy server.

    The option specifies how Kerio Control will connect to the Internet (for non-transparent proxy traffic, update checks, downloads of Sophos updates and for connecting to the online Kerio Control Web Filter databases).

  3. Type an IP address or a DNS name of the parent proxy server to the Server field.

  4. Type a port number behind the colon.

  5. If your provider gives you credentials for authentication, select option Parent proxy server requires authentication and type credentials.

    Credentials are sent with each HTTP request. Only Basic authentication is supported.


comments powered by Disqus