-
Key Terms:
-
Proxy Server:
- A server that acts as an intermediary for requests from clients seeking resources from other servers.
-
IP Proxy:
- A type of proxy server that secures a network by keeping machines behind it anonymous, using Network Address Translation.
-
HTTP Proxy (Web Proxy):
- A type of caching web proxy that caches web pages from servers on the Internet for a set amount of time, in order to better serve the HTTP clients, and to reduce the traffic load placed on the original server.
-
Proxy Auto-Configuration (PAC):
- A file used by a web browser to define the configuration settings for how the browser may automatically choose a proxy server.
- The PAC file and the embedded JavaScript function it depends on pose a security risk - the file can be exploited and modified, redirecting the user to unwanted (potentially malicious) websites.
- Consider disabling PAC files and auto-configuration in general within client web browsers.
-
Internet Content Filter:
- A filter that is usually applied as software at the application layer and can filter out various types of Internet activities such as websites accessed, e-mail, instant messaging, and more. It is used most often to disallow access to inappropriate web material.
-
Web Security Gateway:
- A type of security appliance that actively monitors data flows and scans for viruses, filters content, and act as data loss prevention (DLP) devices.
-
Operation:
- When a client queries an HTTP server, the request instead goes to the HTTP proxy or proxy server.
- The proxy server forwards that request to the HTTP server, and stores a copy of the requested page in its memory (called caching) before forwarding it to the original HTTP client that requested it.
- All subsequent requests made for that site within a configured window of time will receive the cached copy of the site from the HTTP proxy server.
- This reduces the traffic load placed on the real HTTP server, and is much faster and more efficient than retrieving a new instance of the same site each time.
- By also using a content filter, specific website traffic can be filtered out. This increases security for your organization.
-
Forward and Reverse Proxy
-
Forward Proxy:
- The more common proxy server deployment type.
- When a client makes a request of the server, that request is forwarded to the proxy server
-
Reverse Proxy:
- A less common proxy server deployment type.
- This type of proxy server retrieves resources on behalf of a client from one or more servers. These resources are then returned to the client, appearing as if they originated from the proxy server itself.