Wireless Access

 View Only
last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Bluecoat Explicit Proxy Help HTTPS traffic?

This thread has been viewed 2 times

  • 1.  Bluecoat Explicit Proxy Help HTTPS traffic?

    Posted Jun 08, 2015 12:05 PM

    Dear All,

     

    We have recently purchased Aruba WiFI Controllers and APs, everything is done except Guest traffic to internet!! since it is mandatory to filter this traffic through Bluecoat coat explicit proxy.

     

    So far I've used esi group to forward the traffic to bluecoat proxy with dst port nat 8080

    Proxy IP 192.168.6.14

    Guest users 192.168.165.0/24

    Created            

    esi server https-proxy
    trusted-ip-addr 192.168.6.14
    mode nat
    dport 8080

    esi group https-proxy
ping health default
server https-proxy
    any any svc-https redirect esi-group https-proxy direction forward
    any any svc-http redirect esi-group https-proxy direction forward

     

    currently http traffic passing to proxy without any issus but HTTPS traffic i'm getting cannot establish secure connection and I'm sure the traffic is reaching the proxy (checked on the firewall and packet caputre on proxy)

     

    So please help me....... I've been stuggling more than a week..

    ABH 



  • 2.  RE: Bluecoat Explicit Proxy Help HTTPS traffic?

    Posted Jun 13, 2015 07:47 AM

    Hi friend,

     

    We have to understand the topology more clearly to diagnose the issue. I advise you to open a ticket with TAC.



  • 3.  RE: Bluecoat Explicit Proxy Help HTTPS traffic?

    Posted Aug 12, 2015 03:12 AM

    You cant use dst nat for https traffic, You need to utilise wired firewall with pbr rule to forward guest vlan traffic to bluecoat proxy.