An organization is interested in migrating from their existing web proxy architecture to the Web Proxy feature of their PAN-OS 11.0 firewalls. Currently, HTTP and SSL requests contain the destination IP address of the web server and the client browser is redirected to the proxy.
Which PAN-OS proxy method should be configured to maintain this type of traffic flow?
To maintain the type of traffic flow where HTTP and SSL requests contain the destination IP address of the web server and the client browser is redirected to the proxy, the Transparent proxy method should be configured. In this method, the proxy intercepts the client's request transparently without requiring any changes to the client settings. This ensures that the destination IP address remains that of the web server while the proxy handles the traffic flow.
Destination ip is proxy means explicit. Destination ip is server means transparent
For the transparent proxy method, the request contains the destination IP address of the web server and the proxy transparently intercepts the client request (either by being in-line or by traffic steering). There is no client configuration and Panorama is optional. Transparent proxy requires a loopback interface, User-ID configuration in the proxy zone, and specific Destination NAT (DNAT) rules. Transparent proxy does not support X-Authenticated Users (XAU) or Web Cache Communications Protocol (WCCP). https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web-proxy
B. Explicit proxy.
This question was on the exam.. Nov 2023
client browser is redirected to the proxy...mean it use pas file so explicit proxy if you ti maintain this type of traffic flow
C is correct
C is correct. "destination IP address of the web server"
C: As per samqq's reference : For the transparent proxy method, the request contains the destination IP address of the web server and the proxy transparently intercepts the client request (either by being in-line or by traffic steering). There is no client configuration and Panorama is optional. Transparent proxy requires a loopback interface, User-ID configuration in the proxy zone, and specific Destination NAT (DNAT) rules. Transparent proxy does not support X-Authenticated Users (XAU) or Web Cache Communications Protocol (WCCP). https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-new-features/networking-features/web-proxy
As per samqq's reference
C is correct