Java Applet on port 5001 to run through proxy. help!

[dataking]

Greetings,

to mantain total control over the traffic on my network, i do not use NAT. i find the Proxies to be very efficient in mantaining usage policies. but i come up against an obstruction when it comes to sites which run external java applets that connect to their sites to function, a classic example would be the Yahoo! games applets, they work fine when NAT is enabled, but fail when tried to route through proxies. i believe this is becasue these java programs use nonstandard ports, and hence cannot connect becasue of the absence of NAT. i face the same problem with my local phone company's SMS gateway, they also use an embedded java applet which, upon mobnitoring some porits, i ahve found uses port 5001 to connect to its servers to function.

my question : how do i let this kind of activity go through the server without enabling NAT and sticking to Proxies....

best regards,

Shayan

[neil]

There a couple of ways around this, although both are slight compromise solutions. Firstly you could turn on Transparent Redirection in the WWW (and any other) proxy you wish to use, and then allow the clients to go via NAT. This would mean all port 80 traffic wouldl be forced through the WWW proxy, and thus be forced to comply with any policies you have set up there, however it would allow the connection for these java apps to complete, as you say, on their non standard ports.

If you don't want to install the ENS for any reason, then you could always install the WGIC on your client machines. This can also be forced to redirect all its traffic (on port 80 in this case) through the WWW proxy. Having the WGIC on the client machines can give you even greater policy control over users, as you can enforce authentication to stronger level etc etc.

I would suggest one of these would be the best way around your problem.

Regards

Neil