Configuring Web Proxy

Procedure

1. Under Web Proxy Resource List, click Add.
2. Create a web proxy resource and set the following parameters:

   Parameter	Description
   Name	Specifies the name of the web proxy resource.
   Resource Type	Web Link: The web link function allows web pages to be forwarded through the ActiveX control installed on the virtual gateway client. Using the web link function is recommended. Web rewriting: Rewrite elements on the web resource page to implement the web proxy function. NOTE: For intranet web resources, if services are provided in HTTPS mode, the web link function is recommended. If web rewriting is used, you must enable TLS1.0 for intranet web resources, considering that only TLS1.0 can be used between the FW and these resources. To use the web link function, you must use the Internet Explorer to access the virtual client and install the ActiveX control. Due to the differences in website implementation, when the website implementation technology is new or the implementation syntax is not standard, some resources may fail to be rewritten when the website is rewritten using the web rewriting function. As a result, the rewritten website cannot be accessed. This is determined by the implementation mechanism of the web feature. Web rewriting cannot ensure the error-free proxy access to intranet websites. If neither the web rewriting nor web link function works, try other solutions, such as network extension and L2TP over IPSec VPN.
   URL Display State	After Display is selected, the link for the web proxy resource is displayed on the SSL VPN client UI. After Display is deselected, the link for the web proxy resource is not displayed on the SSL VPN client UI. Users can enter the URL of the web proxy resource in the text box on the upper right of the SSL VPN client UI and click Browse, or can enter the URL of the web proxy resource in the address bar of the browser.
   URL	Specifies the URL of the web proxy resource. The URL may be an IP address, such as http://10.2.0.1, or a domain name, such as http://webmail.internal.com. If the URL is a domain name, the DNS server must be configured for the SSL VPN gateway. The domain name is a text string drawn from the alphabet (A-Z), digits (0-9), minus sign (-), period (.) and underscores (_).
   Domain Name Resolution	After Automatic resolution is selected, the virtual gateway resolves the URL into an IP address so that virtual gateway users can access web proxy resources directly without sending query requests to the DNS server. This improves access efficiency.
   IP Address	After Automatic resolution is selected, the resolved IP address is displayed. Click Refresh to update the mapping between the URL and IP address.
   Resource Group	Add web proxy resources to the selected web proxy resource group. A resource can be added to only one resource group. After web proxy resources are added to a group, group configurations apply to all web proxy resources in the group.
   Description	Describes the web proxy resource.

3. Click Next.
4. Configure a web proxy resource group.
   1. Under Resource Group List, click Add.
   2. Create a web proxy resource group and set the following parameters:

      Parameter	Description
      Name	Specifies the name of the web proxy resource group. A web proxy resource group is a collection of web proxy resources.
      Display Priority	Indicates the sequence in which web proxy resource groups are displayed on the SSL VPN client UI. Groups are displayed from left to right in descending order of priority.
      Description	Describes the web proxy resource group.
      Group Members	To add a resource to the group, select a resource under List of Resources to Be Selected, click or double-click the resource. To add all resources to the group, click . To remove a resource from the group, select a resource under List of Resources in the Group, click or double-click the resource. To remove all resources from the group, click .