Prevent users from bypassing proxy

[ITNC]

Sorry if this has been posted before, I'm just trying to find answers quickly so I can finish configuring Wingate for a client soon.

We have installed Wingate 6.2 on a Windows 2003 machine. The workstations and Windows 2003 machine all connect to a switch which in turn connects to the router for internet access. In addition we have setup the workstations to use the IP address of the Wingate machine as the default gateway/dns, so all internet bound traffic is forced through the Wingate(Windows 2003 machine). We want to prevent users from bypassing the proxy. To do so, do we have to use Installation Scenario 2 where there's two interfaces on the Wingate machine...one connecting to the router and the other for the internal interface for workstation/LAN connections. Is this the only way to prevent bypassing the proxy or can we configure our current setup(see beginning of paragraph) to do so? Also when we configure the proxy to prevent bypassing it, will all applications/users be forced to authenticate to the proxy to make connections to external networks?

Any help would be appreciated...
Thanks in advance

[Nev]

Hi,

Yes the two NIC configuration is the best method.

[switch]---> [wingate]--->[router]---------->{internet}
---|
[ws]
---|
[ws]

With the internal NIC to wingate, it should only have an IP and mask, no gateway or DNS entry required. Set it to be 'internal' in the Network tab.

For Authentication, you don't have to enforce any, everyone can connect as a guest if you want.

Wingate will allow access right out of the box mostly first up.

I think the above is the only easy way to prevent bypass.

[ITNC]

Thanks for the response.