[AusNOG] The Case For Corporate Web Proxies ... ?

[Glenn Satchell]

Hi Alex

If you run an honest proxy that doesn't decode SSL, then there's a 
significantly reduced amount of data to be cached as more and more sites 
move to SSL.

If you run a proxy to "protect" your users from undesirable content, 
then you are already losing - the users can just turn on their mobile 
data to see any content you might block.

Having said that I have run a Squid proxy at home to restrict the times 
that my kids can access the net. Up to 56k dial up and ADSL 1 it 
provided some performance improvements and saved a bit on my data cap. 
But it's a losing race and I am slowly removing the restrictions.

So I think the days of the corporate proxy are rapidly disappearing.

regards,
Glenn

On 2022-01-17 20:13, Steven Waite wrote:
> On tin SSL proxy can have performance issues also now with a lot of
> vendors like apple not liking any form of SSL inspection and with
> CND's outside of the 17/8 address space its becoming hard work. Out of
> most of the treats I have seen the last few months have all been SSL
> based.
> 
> 
> 
> -----Original Message-----
> From: AusNOG <ausnog-bounces at lists.ausnog.net> On Behalf Of Wilkinson, 
> Alex
> Sent: Monday, 17 January 2022 6:56 PM
> To: ausnog at lists.ausnog.net
> Subject: [AusNOG] The Case For Corporate Web Proxies ... ?
> 
> Hi all,
> 
> Just looking for opinions here. In this day and age with next gen
> firewalls such as Pal Altos' etc are there any strong arguments to
> continue to use a web proxy such a Bluecoat ?
> 
>     -Alex
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog