Network Access Control

 View Only

How to implement Gateway Enforcer/DHCP Enforcer to provide On-Demand agent if we use the explicit proxy?

  • 1.  How to implement Gateway Enforcer/DHCP Enforcer to provide On-Demand agent if we use the explicit proxy?

    Posted Jan 26, 2010 05:31 AM

    Has anyone ever implemented Gateway Enforcer or DHCP Enforcer in the explicit proxy environment?

    We are now implementing Gateway Enforcer for wireless users, and DHCP Enforcer for LAN users.
    Also, we expect to provide On-Demand agent for these users.

    From our tests,
    For the Gateway Enforcer, it uses HTTP Redirect to redirect clients to the page for downloading On-Demand agent.
    But if we use explicit proxy, the Gateway Enforcer couldn't use HTTP Redirect to provide On-Demand agent download page to clients.
    How can we configure the Gateway Enforcer, or apply anythings to provide On-Demand agent download page to clients?

    In case of DHCP Enforcer, the DHCP Enforcer will provide its IP as a DNS server during the quarantined phase.
    When clients attempt to access any websites, and send the DNS query to DHCP Enforcer, DHCP Enforcer will give its IP address instead of OCS servers.
    Then clients will send HTTP Get directly to the DHCP Enforcer. And clients will get the page for downloading On-Demand agent.
    But if we use explicit proxy, when clients attempt to access any websites, they will send request directly to proxy server without sending DNS query to DHCP Enforcer.
    So how can we configure the Gateway Enforcer, or apply anythings to provide On-Demand agent download page to clients?


    Please suggest.

    Thanks