Overview of TCP Proxy
The FW serves as the TCP proxy and implements TCP-layer isolation for network traffic.
As shown in Figure 1, after the TCP traffic sent by the client to access the server matches a proxy policy of the FW, the FW becomes the TCP proxy. The FW proxies the server to establish a TCP connection with the client and proxies the client to establish another TCP connection with the server. The client and server exchange data flows through the two TCP connections.
When the FW serves as the TCP transparent proxy, it implements TCP-layer isolation for traffic from the networks at both sides and prevents devices on one network from directly communicating with devices on the other network, which effectively blocks unauthorized access attempts and malicious attacks.
