About the TCP-UDP-Proxy

The TCP-UDP-proxy is a low precedence policy that allows all outbound TCP and UDP traffic from networks protected by your XTM device. If you remove the Outgoing policy, and do not want to add a separate policy for each type of traffic you want to allow out through your firewall, you can add the TCP-UDP-proxy. This policy only allows outbound TCP and UDP traffic, but it also monitors that traffic for HTTP, HTTPS, SIP, and FTP packets sent on non-standard ports. For the HTTP, HTTPS, SIP, and FTP protocols, the TCP-UDP proxy relays the traffic to the correct proxy for each protocol.

To add the TCP-UDP-proxy to your XTM device configuration, see Add a Proxy Policy to Your Configuration.

If you must change the proxy definition, from the Firewall Polices / Edit page, you can modify the definition. .This page is separated into several tabs: Settings, Application Control, Traffic Management, Proxy Action, Scheduling, and Advanced.

Settings Tab

On the Settings tab, you can set basic information about a proxy policy, such as whether it allows or denies traffic, create access rules for a policy, or configure policy-based routing, static NAT, or server load balancing. The Settings tab also shows the port and protocol for the policy, as well as an optional description of the policy. You can use the settings on this tab to set logging, notification, automatic blocking, and timeout preferences.

Application Control Tab

If Application Control is enabled on your device, you can set the action this proxy uses for Application Control.

  1. Select the Application Control tab.
  2. From the Application Control Action drop-down list, select an application control action to use for this policy, or create a new action.
  3. Click Save.

For more information, see Enable Application Control in a Policy.

Traffic Management Tab

On the Traffic Management tab, you can select the Traffic Management action for the policy. You can also create a new Traffic Management action. For more information about Traffic Management actions, see Define a Traffic Management Action in v11.8.x and Lower and Add a Traffic Management Action to a Policy.

To apply a Traffic Management action in a policy:

  1. Select the Traffic Management tab.
  2. From the Traffic Management Action drop-down list, select a Traffic Management action.

    Or, to create a new Traffic Management action, select Create new and configure the settings as described in the topic Define a Traffic Management Action in v11.8.x and Lower.
  3. Click Save.

Proxy Action Tab

You can choose a predefined proxy action or configure a user-defined proxy action for this proxy. For more information about how to configure proxy actions, see About Proxy Actions.

To configure the proxy action:

  1. Select the Proxy Action tab.
  2. From the Proxy Action drop-down list, select the proxy action to use for this policy.

    For information about proxy actions, see About Proxy Actions.
  3. Click Save.

For the TCP-UDP-proxy, you can configure the general settings for a proxy action. For more information, see TCP-UDP-Proxy: General Settings.

Scheduling Tab

On the Scheduling tab, you can specify an operating schedule for the policy. You can select an existing schedule or create a new schedule.

  1. Select the Scheduling tab.
  2. From the Schedule Action drop-down list, select a schedule.

    Or, to create a new schedule, select Create New and configure the settings as described in the topics Create Schedules for XTM Device Actions and Set an Operating Schedule.
  3. Click Save.

Advanced Tab

The Advanced tab includes settings for NAT, QoS, multi-WAN, and ICMP options.

To edit or add a comment to this proxy policy configuration, type the comment in the Comment text box.

For more information on the options for this tab, see:

See Also

About Proxy Policies and ALGs

About the Outgoing Policy

Give Us Feedback  •   Get Support  •   All Product Documentation  •   Knowledge Base