Virtual Secure Web Gateway

Dear All,

In my company, ips are segregated so that they a group of ip will go through a particular adsl.  but with the proxy in the webgateway , only one ip is coming out (i.e. that of the swg) .  is there a way to let the ip of the pc to go out even if it is connected with the proxy?

...that level of intelligence is not available in the SWG to say "Send proxied web-traffic from one client out 'default gateway 2', while other using a default gateway 1 for other clients".  The SWG is not a router.

Is that what you want to accomplish, or could you provide a bit more info on what you want it to do?

If the above is what you want to happen, then the simplest way of accomplishing it I can think of, is to implement a separate SWG Proxy for the clients you want to go out through this particular adsl.

i want to mean that traffic going out of the proxy while keeping their own ip

So I get the impression you want to send traffic from clients through the Web Gateway's proxy, but in the logs on your router you still want to be able to see the original source IP of the proxied traffic instead of the SWG's IP?  Unfortunately this isn't really possible because this is exactly the purpose of the proxy, to effectively stand in and manage this traffic on behalf of the original client.  If you ran the SWG Inline, then the traffic would pass throgh the SWG on the way to the firewall transparently and I think you then achieve what you want.

Hope that helps,

Kevin