3 Questions

Use this forum to post questions relating to WinGate, feature requests, technical or configuration problems

Moderator: Qbik Staff

3 Questions

Postby lsa » Dec 15 04 10:31 am

Three questions - I tried quick searches and FAQ - still 3 questions

I am evaluating WinGate 6 as a socks proxy only.

1) (How) can I specify multiple internal (not proxied) networks to the client?

2) (How) can I limit proxy forwarding to *only* specified Internet sites on the WinGate server?

3) If I set up two identical WinGate servers and enter them both in the clients, and one of the servers dies, will the client fail over to the remaining good server?

This is for a group of kiosks that we want to have access internal stuff and a very limited number of networks on the Internet.

Thanks in advance,
Larry
lsa
 
Posts: 3
Joined: Dec 15 04 10:23 am

Re: 3 Questions

Postby Pascal » Dec 15 04 11:17 am

lsa wrote:1) (How) can I specify multiple internal (not proxied) networks to the client?


Can you explain that a bit more, please?

lsa wrote:2) (How) can I limit proxy forwarding to *only* specified Internet sites on the WinGate server?


The easiest way is to set a policy for "Everyone". In your case, this would be in the SOCKS proxy / System Policies (But, if you are using Interecepts could be in WWW Proxy Service / etc.) In that policy you can use the Advanced Filter and Criterion to specify how/what to restrict internet access to.

http://forums.qbik.com/viewtopic.php?t= ... ght=manual

That post gives an overview of how policies work, where to implement them, etc.

lsa wrote:3) If I set up two identical WinGate servers and enter them both in the clients, and one of the servers dies, will the client fail over to the remaining good server?


Is this using the WinGate Internet Client?
Pascal

Qbik New Zealand
pascalv@qbik.com
http://www.qbik.com
Pascal
Qbik Staff
 
Posts: 2623
Joined: Sep 08 03 8:19 pm
Location: Auckland, New Zealand

Re: 3 Questions

Postby lsa » Dec 15 04 11:56 am

[quote="lsa"]1) (How) can I specify multiple internal (not proxied) networks to the client?[/quote]

[quote="Pascal"]Can you explain that a bit more, please?[/quote]

The WinGate clients are on PCs on a multi-network installation. I need them to be able to access services on these networks without going through the WinGate server (they move an awful lot of video). I just want them to be able to access a select few sites outside our internal networks.

[quote="lsa"]2) (How) can I limit proxy forwarding to *only* specified Internet sites on the WinGate server?[/quote]

[quote="Pascal"]The easiest way is to set a policy for "Everyone". In your case, this would be in the SOCKS proxy / System Policies (But, if you are using Interecepts could be in WWW Proxy Service / etc.) In that policy you can use the Advanced Filter and Criterion to specify how/what to restrict internet access to.

http://forums.qbik.com/viewtopic.php?t= ... ght=manual

That post gives an overview of how policies work, where to implement them, etc.[/quote]

Got it - thank you.

[quote="lsa"]3) If I set up two identical WinGate servers and enter them both in the clients, and one of the servers dies, will the client fail over to the remaining good server? [/quote]

[quote="Pascal"]Is this using the WinGate Internet Client?[/quote]

I think so. It's in with the server. Installation asks client or server...

(Hope I got this quoting right...looks wrong in preview...sorry if wrong...)
lsa
 
Posts: 3
Joined: Dec 15 04 10:23 am

Postby Pascal » Dec 15 04 12:03 pm

lsa wrote:The WinGate clients are on PCs on a multi-network installation. I need them to be able to access services on these networks without going through the WinGate server (they move an awful lot of video). I just want them to be able to access a select few sites outside our internal networks.


A WinGate Server installation should not affect your ability to reach other networks on your multi-network installation. I'm assuming you can reach them currently?

Not clear about how you want the clients to fall over to the subsequent server. Where are you setting that up? (I.e. where are you entering it?)
Pascal

Qbik New Zealand
pascalv@qbik.com
http://www.qbik.com
Pascal
Qbik Staff
 
Posts: 2623
Joined: Sep 08 03 8:19 pm
Location: Auckland, New Zealand

Postby lsa » Dec 15 04 2:35 pm

Yes, I can reach them without WinGate. I thought installing WinGate would effect the PC the same way as installing a socks client - all IP traffic would go through the proxy. How does the WinGate Internet Client know when to pass the IP traffic through the WinGate server?

With the multiple-server config, I'm trying to eliminate a single point of failure. If one WinGate server goes down, use the other. I see the ability, using the client applet, to configure multiple WinGate Servers (WinGate Servers tab). I was hoping that adding two WinGate Servers (with the same config on each, but different IP addresses), and checking the "Automatically select which server to use" button, would provide load balancing and/or fail-over functionality. Both WinGate Servers would have access to the Internet.

Thanks for the help so far.
Larry
lsa
 
Posts: 3
Joined: Dec 15 04 10:23 am

Postby Pascal » Dec 17 04 8:20 am

Hi, yes - it will have that effect. Certain applications are / can be excluded though (They won't be hooked). With an Enterprise license you can control this from the Server itself (Along with which applications are allowed to run and not to run, etc.) "Explorer.exe" is added to that list by default, I believe.

Yup. The way you have described it is how it should work. Ensure that your servers are reachable on port 368 UDP (Which is used for GDP Broadcasts) and you can build a series of failover systems like that.
Pascal

Qbik New Zealand
pascalv@qbik.com
http://www.qbik.com
Pascal
Qbik Staff
 
Posts: 2623
Joined: Sep 08 03 8:19 pm
Location: Auckland, New Zealand


Return to WinGate

Who is online

Users browsing this forum: No registered users and 4 guests

cron