Comodo Secure Web Gateway

• Comodo Secure Web Gateway - Quick Start Guide
  • Purchase A License
  • Login To Your Comodo SWG Account
  • Configure Traffic Forwarding To Comodo SWG
    • Traffic Forwarding Via Direct Proxy Or PAC
    • Traffic Forwarding Via Proxy Chaining
    • Traffic Forwarding Via Internet Content Adaptation Protocol (ICAP)
    • Traffic Forwarding Via SWG Agent
  • Connect Your Network(s) To Comodo SWG
  • Connect Your Roaming Device(s) To Comodo SWG
  • Configure User Authentication Settings
  • Add Users
  • Create Policies
  • Apply Policies
  • Generate Reports
• About Comodo Security Solutions

Traffic Forwarding via Direct Proxy or PAC

Direct proxy traffic forwarding is suitable for smaller organizations with fewer endpoints and no other proxy configured on the network. Here are some common methods of configuring a direct proxy:

• Set Comodo Proxy IP in Browsers

• Set Comodo Proxy via PAC (Proxy Auto-Configuration)

• Set Comodo Proxy via Windows Group Policy

Set SWG Proxy IP in Browsers

Note:

• The proxy address details vary for each account. The addresses for your account can be found in the Comodo SWG console.

• Click 'Administration' > 'How to Configure' > 'Set as Proxy' > 'Direct Proxy'

• Choose your preferred browser (Chrome, Firefox, Internet Explorer)

• Your SWG proxy address is shown in a string similar to the following:

ec2-35-182-130-219.ca-central-1.compute.amazonaws.com:19080

In the example above,

• SWG IP address = 35.182.130.219

• SWG domain name = ec2-35-182-130-219.ca-central-1.compute.amazonaws.com

Chrome

• Open Chrome

• Open 'Settings', type 'Proxy Settings' in the search bar, then click 'Change Proxy Settings'

• Click the 'Connections' tab then click 'LAN settings'

• Select 'Use a proxy server for your LAN' check box and click 'Advanced'

• In the 'HTTP field', enter SWG IP  [X.X.X.X] or Domain name and port number as 19080

• In the 'Secure field', enter SWG IP  [X.X.X.X] or Domain name and port number as 19443

• In the 'Exceptions' field enter enter SWG IP [X.X.X.X] or Domain name

• Click 'OK'

Internet Explorer

• Open Internet Explorer

• Open 'Tools' > 'Internet Options', open the 'Connections' tab and click 'LAN settings'

• Select 'Use a proxy server for your LAN' check box and click 'Advanced'

• In the 'HTTP field', enter SWG IP  [X.X.X.X] or Domain name and port number as 19080

• In the 'Secure field', enter SWG IP  [X.X.X.X] or Domain name and port number as 19443

• In the 'Exceptions' field enter enter SWG IP [X.X.X.X] or Domain name

• Click 'OK'.

Firefox

• Open Firefox

• Click 'Options' from the 'Tools' menu

• Click 'Advanced' on the left

• Click 'Network', then 'Settings' (under 'Connection')

• Select 'Manual Proxy Configuration'

• In the 'HTTP Proxy' field, enter SWG IP [X.X.X.X] or Domain name and port number as 19080

• In the 'SSL Proxy' field, enter SWG IP [X.X.X.X] or Domain name and port number as 19443

• In the 'No Proxy for:' box enter SWG IP [X.X.X.X] or Domain name

• Click 'OK'.

Set SWG Proxy via PAC (Proxy Auto-Configuration)

Note:

• The PAC URL for your account can be found in the Comodo SWG console at 'Configuration' > 'Configuration' > 'PAC'.

• You can customize the PAC file to grant direct access to domains and bypass Comodo SWG.

• See 'Configure PAC File' for more details.

Chrome

• Open Chrome

• Open 'Settings', type 'Proxy Settings' in the search bar, then click 'Change Proxy Settings'

• Click the 'Connections' tab, and then click 'LAN settings'

• Select the 'Use automatic configuration script' check box

• Address box – type the SWG PAC URL, for example, https://dome.comodo.com/pac_file/f09ed11bfe157ae025e33d84012af39c.pac

• Click 'OK'.

Internet Explorer

• Open Internet Explorer

• Open 'Tools' > 'Internet Options', open the 'Connections' tab and click 'LAN settings'

• Select the 'Use automatic configuration script' check box

• Address box – type SWG PAC URL, for example, https://dome.comodo.com/pac_file/f09ed11bfe157ae025e33d84012af39c.pac

• Click 'OK'.

Firefox

• Click 'Options' from the 'Tools' menu

• Click 'Advanced' on the left

• Click 'Network', then 'Settings' (under 'Connection')

• Select the 'Automatic proxy configuration URL' radio button

• In the 'Automatic proxy configuration URL' field, type SWG PAC URL, for example, https://dome.comodo.com/pac_file/f09ed11bfe157ae025e33d84012af39c.pac

• Click 'OK'

Set SWG Proxy via Windows Group Policy

• Group Policy Objects (GPOs) are used to publish settings to multiple endpoints based on Active Directory group, domain or organization.

• This helps networks with Active Directory to set proxies faster and easier over a Windows Server.

Note: It may take a while for all computers to receive the rule and may require a restart.

Step 1 - Create a New Group Policy Object

1. Log on to your Windows Server in the domain then click Start > Programs > Administrative Tools > Active Directory Users & Computers

2. Right click on the domain or Organizational Unit where the Group Policy should be applied

3. Select "Create a GPO in this domain, and Link it here..."

4. Create a new GPO (e.g. Comodo Web Security)

5. Click 'OK'.

Step 2 -Set proxies in endpoint browsers using the created GPO:

Internet Explorer:

1. Edit the GPO for SWG PAC File

2. Right click on the new GPO and Select 'Edit'.

3. In the Group Policy window, click User Configuration > Windows Settings > Internet Explorer Maintenance > Connection > Click on Automatic Browser Configuration

4. On the Automatic Configuration tab, select 'Automatically detect configuration settings and Enable Automatic Configuration'

5. Enter a time interval in the 'Automatically configure every' check box.

6. Enter the following Comodo SWG PAC URL, for example, https://dome.comodo.com/pac_file/f09ed11bfe157ae025e33d84012af39c.pac

7. Click 'OK'

Firefox and Chrome:

Edit the GPO for SWG PAC File.

1. Right-click on the new GPO and Select 'Edit'.

2. Select Computer Configuration > Administrative Templates.

3. Choose 'Add Template', click 'Add' and open firefoxlock.adm for Firefox or chrome.adml for Chrome.

4. Refresh the window and go to Computer Configuration > Administrative Templates and double-click the browser related selection for editing.

5. Open 'Proxy Settings'.

6. Select 'Automatic Proxy Configuration option' and paste SWG PAC URL, for example https://dome.comodo.com/pac_file/f09ed11bfe157ae025e33d84012af39c.pac

7. Click 'OK'.

• After connecting your network(s), make sure to add them as a 'Trusted Network' in the 'Locations' interface.

• If you do not then Comodo SWG will not function correctly and your network will not be able to connect to the internet. See next step Connect your network(s) to Comodo SWG

• No need to select any authentication and traffic forwarding option on the Locations interface.

Please contact us at domesupport@comodo.com if you have any issues connecting endpoints / networks to Comodo SWG.