7.5	Proxy Settings

The Proxy Settings node allows you to configure several proxy settings. The settings include:

•	Network Configuration

•	Authentication Method

•	Chained Proxy

NOTE: This node is only available in GFI WebMonitor Standalone Proxy version.

Screenshot 71 - Configuration: Proxy Settings view

7.5.1

Configuring Network Configuration

The Network Configuration area allows you to configure GFI WebMonitor to listen for incoming connections on a specific network card. The Network Configuration drop-down list contains a list of network cards installed on GFI WebMonitor machine.

To configure on which network interface GFI WebMonitor will listen to incoming connections:

1. Navigate to Configuration ► Proxy Settings.

Screenshot 72 - Configuration: Proxy Settings view - Network Configuration

2. Select the IP address of the network card (through which the proxy listens to incoming connections) from the drop-down list, and key in the listening port (default 8080).

3. Select the Use WPAD for network clients to allow client machines to detect the server as the default proxy.

4. Select:

•	Option 1: Publish the IP of the GFI WebMonitor proxy in WPAD checkbox to include the GFI WebMonitor IP address in the WPAD.dat file.

•	Option 2: Publish the host name of the GFI WebMonitor proxy in WPAD checkbox to include the GFI WebMonitor host name in the WPAD.dat file.

5. Click Save Settings to finalize configuring on which network interface GFI WebMonitor will listen to incoming connections.

NOTE: Failing to click Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.

NOTE: Select the Listen on all network interfaces checkbox if the GFI WebMonitor server is required to listen to incoming connections on multiple network cards.

7.5.2

Configuring Authentication Method

The Authentication Method area allows you to configure the authentication method used by the proxy. This determines how client machines are validated when accessing the Internet.

Screenshot 73 - Configuration: Proxy Settings view - Authentication method

No authentication

Select this checkbox if proxy authentication is not required. Thus, the user is not required to key in a valid username and password when launching a new Internet session. When launched, the Internet browser will not prompt the user to provide valid login credentials.

Basic authentication

Select this checkbox if the user is required to key in a valid username and password when launching a new Internet session. When launched, the Internet browser will prompt the user to provide valid login credentials.

Integrated authentication

Select this checkbox if proxy authentication is required. This is done using the client machines’ access control service. Users will not be required to key in login credentials to access the Internet. (Recommended)

The Integrated authentication option is disabled on machines where Local users are authenticated as guest (This policy is enabled by default on a Microsoft Windows XP Pro machine which has never been joined to a Domain Controller). Network access method can be configured:

•	Manually on each machine or,

•	Using Active Directory GPO.

For more information, refer to the Configuring Network Access policy section in the Miscellaneous chapter.

Exception List

The Set Exception List button allows you to specify the IP addresses that GFI WebMonitor will exempt from proxy authentication.

To add IP addresses:

1. Click the Set Exception List button.

Screenshot 74 - Exception list dialog

2. In the IP field, specify the IP that is to be excluded and click Add. Repeat for all the required IP addresses.

3. Click OK to exit the dialog.

4. Click Save Settings to finalize adding IP addresses.

NOTE: Failing to click Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.

7.5.3

Configuring Chained Proxy

The Chained Proxy area allows you to configure the forwarding of HTTP traffic received by the GFI WebMonitor machine to another proxy.

NOTE: Client machines have to be configured to forward HTTP traffic received by them to the GFI WebMonitor machine.

To configure GFI WebMonitor to forward HTTP traffic to a proxy server:

1. Navigate to Configuration ► Proxy Settings.

Screenshot 75 - Configuration: Proxy Settings view - Chained Proxy

2. Select the WebMonitor Proxy will route the web traffic to the following proxy: checkbox.

3. Key in the proxy server IP address in the Address text box and key in the chained proxy’s port (default 8080) in the Port text box.

4. If proxy authentication requires alternate credentials, key in the required credentials in the Username and Password fields.

NOTE: If no credentials are keyed in, the default user credentials are used.

5. (Optional) Click the Test Proxy Chaining button to test the connection between the GFI WebMonitor machine and the proxy server.

6. Click Save Settings to finalize configuring GFI WebMonitor to forward HTTP traffic to a proxy server.

NOTE: Failing to click Save Settings means that you will lose settings as soon as you leave the view to move to another section in GFI WebMonitor.