User Tools

Site Tools


http_proxy

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

http_proxy [2020/04/06 17:34] (current)
navaneeth created
Line 1: Line 1:
 +====== HTTP Proxy ======
 +
 +This article helps with providing steps to install and use the HTTP Proxy app in Trisul Network Analytics.
 +
 +**
 +To examine inside-out of Web Traffic Web traffic to identify suspicious content, which can be a spyware, malformed content, or any other type of attack and view the exact destination addresses of Hosts.
 +**
 +
 +{{:​tips:​http-proxy-app.png?​200|}}
 +
 +This app allows you :
 +
 +  * To handle HTTP CONNECT and straight through HTTP proxies (Squid and most other commonly available UTMs).
 +  * To add a new Traffic Counter Group "​External Hosts Proxy" to measure the actual Destination rather than the Proxy server IP.
 +  * To label all flows with the actual destination host.
 +  * To add EDGES for graph analytics.
 +
 +===== Installation =====
 +
 +  - You can install the app by Logging on as Admin and selecting //Web Admin > Manage > Apps > HTTP Proxy//.
 +  - Restart the probes after installing this app.
 +
 +{{:​tips:​http-proxy-admin.png?​600|}}
 +
 +===== Viewing Data =====
 +
 +  * You can view the data by selecting //Retro > Retro Counters//.
 +  * Choose the counter-group as 'Proxy External'​.You will get upload/​download traffic by actual hostname.
 +  * You can view the '​Edges'​ by selecting on any entries.
 +  * To search for a Flows to particular target Hosts,​Select //Tools > Explore Flows// and search expression[Example:​@tag=mail.google.com@]
 +
 +{{:​tips:​http-proxyexternal.png?​600|}}
 +
 +
  
http_proxy.txt · Last modified: 2020/04/06 17:34 by navaneeth