Comodo Secure Web Gateway

• Introduction To Comodo Secure Web Gateway
  • Purchase Licenses
  • Login To The Admin Console
• The Admin Console
• The Dashboard
  • Customize The Dashboard
• Configure Comodo Secure Web Gateway
  • Connect Your Network / Devices To Secure Web Gateway
    • Traffic Forwarding Via Direct Proxy Or PAC
    • Traffic Forwarding Via Proxy Chaining
    • Traffic Forwarding Via Internet Content Adaptation Protocol (ICAP)
    • Traffic Forwarding Via SWG Agent
  • Connect Your Roaming Devices To Comodo Secure Web Gateway
    • View Enrolled Roaming Devices
  • Configure Comodo Secure Web Gateway Messages
  • Configure Domain Name
  • Configure PAC File For Exclusions
  • Configure Data Loss Prevention And View ICAP Service Information
  • Configure Policy Time-Schedules
• Manage Trusted Networks
• Manage Policies
  • Security Policy
    • Configure Advanced Threat Protection Settings
    • Configure Containerization Settings
  • Web Content Policy
    • Manage URL Filtering Policies
    • Configure SSL Inspection Settings
    • Manage File Type Control Rules
• Apply Policies To Networks
• Administration
  • Configure User Authentication Settings
  • User Management
    • Manage Users
    • Manage User Groups
    • Manage Departments
    • Manage Computers
  • My Profile
• Reports
  • Custom Reports
  • Scheduled Reports
• Unknown Threat Statistics
• About Comodo Security Solutions

Traffic Forwarding via Direct Proxy or PAC

 

Direct proxy traffic forwarding is suitable for smaller organizations with fewer endpoints and no other proxy configured on the network. Here are some common methods of configuring a direct proxy:

• Set SWG Proxy IP in Browsers

• Set SWG Proxy via PAC (Proxy Auto-Configuration)

• Set SWG Proxy via Windows Group Policy
  

Set SWG Proxy IP in Browsers

Note:

• The proxy address details vary for each account. The addresses for your account can be found in the SWG console

• Click 'Administration' > 'How to Configure' > 'Set as Proxy' > 'Direct Proxy'

• Choose your preferred browser (Chrome, Firefox, Internet Explorer)

• Your SWG proxy address is shown in a string similar to the following:

ec2-35-182-130-219.ca-central-1.compute.amazonaws.com:19080

• In the example above,

• SWG IP address = 35.182.130.219

• SWG domain name = ec2-35-182-130-219.ca-central-1.compute.amazonaws.com

Chrome

1. Open Chrome

2. Open 'Settings', type 'Proxy Settings' in the search bar, then click 'Change Proxy Settings'

3. Click the 'Connections' tab then click 'LAN settings'

4. Select 'Use a proxy server for your LAN' check box and click 'Advanced'

5. In the 'HTTP field', enter SWG IP [X.X.X.X] or Domain name and port number as 19080

6. In the 'Secure field', enter SWG IP [X.X.X.X] or Domain name and port number as 19443

7. In the 'Exceptions' field enter enter SWG IP [X.X.X.X] or Domain name

8. Click 'OK'.
   
   

Internet Explorer

1. Open Internet Explorer

2. Open 'Tools' > 'Internet Options', open the 'Connections' tab and click 'LAN settings'

3. Select 'Use a proxy server for your LAN' check box and click 'Advanced'

4. In the 'HTTP field', enter SWG IP [X.X.X.X] or Domain name and port number as 19080

5. In the 'Secure field', enter SWG IP [X.X.X.X] or Domain nameand port number as 19443

6. In the 'Exceptions' field enter enter SWG IP [X.X.X.X] or Domain name

7. Click 'OK'.
   
   

Firefox

1. Open Firefox

2. Click 'Options' from the 'Tools' menu

3. Click 'Advanced' on the left

4. Click 'Network', then 'Settings' (under 'Connection')

5. Select 'Manual Proxy Configuration'

6. In the 'HTTP Proxy' field, enter SWG IP [X.X.X.X] or Domain name and port number as 19080

7. In the 'SSL Proxy' field, enter SWG IP [X.X.X.X] or Domain name and port number as 19443

8. In the 'No Proxy for:' box SWG IP [X.X.X.X] or Domain name

9. Click 'OK'.

Set SWG Proxy via PAC (Proxy Auto-Configuration)

Note:

• The PAC URL for your account can be found in the SWG console at 'Configuration' > 'Configuration' > 'PAC'.

• You can customize the PAC file to grant direct access to domains and bypass Comodo SWG.

• See 'Configure PAC File' for more details.

Chrome

1. Open Chrome

2. Open 'Settings', type 'Proxy Settings' in the search bar, then click 'Change Proxy Settings'

3. Click the 'Connections' tab, and then click 'LAN settings'

4. Select the 'Use automatic configuration script' check box

5. Address box - type SWG PAC URL, for example, https://dome.comodo.com/pac_file/f09ed11bfe157ae025e33d84012af39c.pac

6. Click 'OK'

Internet Explorer

1. Open Internet Explorer

2. Open 'Tools' > 'Internet Options',open the 'Connections' tab and click 'LAN settings'

3. Select the 'Use automatic configuration script' check box

4. Address box, typeSWG PAC URL, for example, https://dome.comodo.com/pac_file/f09ed11bfe157ae025e33d84012af39c.pac

5. Click 'OK'.
   
   

Firefox

1. Click 'Options' from the 'Tools' menu

2. Click 'Advanced' on the left

3. Click 'Network', then 'Settings' (under 'Connection')

4 . Select the 'Automatic proxy configuration URL' radio button

5. In the 'Automatic proxy configuration URL' field, type SWG PAC URL, for example, https://dome.comodo.com/pac_file/f09ed11bfe157ae025e33d84012af39c.pac

6. Click 'OK'.

Set SWG Proxy via Windows Group Policy

• Group Policy Objects (GPOs) are used to publish settings to multiple endpoints based on Active Directory group, domain or organization.

• This helps networks with Active Directory to set proxies faster and easier over a Windows Server.

Note: It may take a while for all computers to receive the rule and may require a restart.

Step 1 - Create a New Group Policy Object

1. Log on to your Windows Server in the domain then click Start > Programs > Administrative Tools > Active Directory Users & Computers

2. Right-click on the domain or Organizational Unit where the Group Policy should be applied

3. Select “Create a GPO in this domain, and Link it here...”

4. Create a new GPO (e.g. Comodo Web Security)

5. Click 'OK'
   
   

Step 2 - Set proxies in endpoint browsers using the created GPO:

Internet Explorer:

Edit the GPO for SWG PAC File

1. Right click on the new GPO and Select 'Edit'.

2. In the Group Policy window, click User Configuration > Windows Settings > Internet Explorer Maintenance > Connection > Click on Automatic Browser Configuration

3. On the Automatic Configuration tab, select 'Automatically detect configuration settings and Enable Automatic Configuration'

4. Enter a time interval in the 'Automatically configure every' check box.

5. Enter the following Comodo SWG PAC URL, for example, https://dome.comodo.com/pac_file/f09ed11bfe157ae025e33d84012af39c.pac

6. Click 'OK'

Firefox and Chrome:

Edit the GPO for SWG PAC File

1. Right click on the new GPO and Select 'Edit'.

2. Select Computer Configuration > Administrative Templates

3. Choose 'Add Template', click 'Add' and open firefoxlock.adm for Firefox or chrome.adml for Chrome.

4. Refresh the window and go to Computer Configuration > Administrative Templates and double-click the browser related selection for editing.

5. Open 'Proxy Settings'.

6. Select 'Automatic Proxy Configuration option' and paste SWG PAC URL, for example https://dome.comodo.com/pac_file/f09ed11bfe157ae025e33d84012af39c.pac

7. Click 'OK'
   
   

Note: The PAC URL for your account can be found in the SWG console at 'Configuration' > 'Configuration' > 'PAC'. You can customize the PAC file to grant direct access to domains and bypass Comodo SWG. See 'Configure PAC File' for more details. Comodo SWG uses ports 17443, 19443 and 19080 to connect to your networks. Please configure your firewall to allow SWG traffic over these ports.

After connecting your network(s), make sure to add them as a 'Trusted Network' in the 'Locations' interface. If you do not then SWG will not function correctly and your network will not be able to connect to the internet. See 'Manage Trusted Networks' for more details.

Please contact us at domesupport@comodo.com if you have any issues connecting endpoints / networks to Comodo SWG.