Hi Alex

If you run an honest proxy that doesn't decode SSL, then there's a significantly reduced amount of data to be cached as more and more sites move to SSL.

If you run a proxy to "protect" your users from undesirable content, then you are already losing - the users can just turn on their mobile data to see any content you might block.

Having said that I have run a Squid proxy at home to restrict the times that my kids can access the net. Up to 56k dial up and ADSL 1 it provided some performance improvements and saved a bit on my data cap. But it's a losing race and I am slowly removing the restrictions.

So I think the days of the corporate proxy are rapidly disappearing.

regards,
Glenn

On 2022-01-17 20:13, Steven Waite wrote:
On tin SSL proxy can have performance issues also now with a lot of
vendors like apple not liking any form of SSL inspection and with
CND's outside of the 17/8 address space its becoming hard work. Out of
most of the treats I have seen the last few months have all been SSL
based.



-----Original Message-----
From: AusNOG <[email protected]> On Behalf Of Wilkinson, Alex
Sent: Monday, 17 January 2022 6:56 PM
To: [email protected]
Subject: [AusNOG] The Case For Corporate Web Proxies ... ?

Hi all,

Just looking for opinions here. In this day and age with next gen
firewalls such as Pal Altos' etc are there any strong arguments to
continue to use a web proxy such a Bluecoat ?

    -Alex
_______________________________________________
AusNOG mailing list
[email protected]
http://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
[email protected]
http://lists.ausnog.net/mailman/listinfo/ausnog
_______________________________________________
AusNOG mailing list
[email protected]
http://lists.ausnog.net/mailman/listinfo/ausnog

Reply via email to