Online Resources

Proxy Settings for Online Resources

This document provides proxy configuration for online resources, for service to both internal and remote access clients. Information on remote access policies for other online products, and alternate forms of access to online resources, can be found on the Online Resources index page at http://www.more.net/online/.

Some proxy and filtering services force traffic to be rerouted through third-party servers, which are outside MOREnet's networks. If these servers are shared with many different customers, and authenticate with a common IP address, these server IPs cannot be added to the filter list. Such services may have work-arounds for online resources. Make sure that the solutions offered by these services comply with MOREnet policies. Direct questions to MOREnet's Technical Support.

Proxy Server Requirements

A proxy server must meet the following minimum requirements:

• Must be able to accept requests from external networks.
• Must be able to authenticate users and restrict access.

Please note the following:

• Not all proxy servers can accept requests from external networks.
• Proxy servers may work with a network database (Novell eDirectory, Novell NDS, Windows domain, LDAP, etc.) or work from their own databases.
• Various levels of security may be implemented with authentication. No guest logins are permitted.

General Proxy Configuration

Add the following to the DNS exclusion list so pages from these servers are not cached:

• *.ebscohost.com
• *.epnet.com
• *.newsbank.com

Cookies should be permitted in both proxy and client browsers, and should not be filtered. If available, disable persistent connection to browser and disable persistent connection to origin server.

If a proxy server forces traffic to be rerouted to third party servers outside of MOREnet's networks, configuration of services documented here may not be workable because of IP authentication restrictions. Contact your proxy provider to explore options for work-arounds. In some cases, supplementary equipment (such as an additional router) must assist in bypassing the primary filtering service.

Specific Proxy Configurations

Border Manager

Authentication must be enabled on the Border Manager Server. It is not enabled by default.

Border Manager 3.x works completely with existing Directory (no additional passwords needed).

Setup in Border Manager 3.0 and Above

1. In Border Manager Setup, choose the Application Proxy tab, click on the Caching button. Click on the Cacheable Object Control tab and add the database domains above. Check Match any hostname ending with this domain.
2. From the Application Proxy tab, click on the Details button, turn off the cookie and persistent connection settings mentioned above, and enable Java Applets Stripping.

Manual Browser Configurations via Proxy

Browsers must point to the proxy server for access to online resources.

Netscape and Firefox for Windows

1. From the Tools menu, select Options.
2. In the General window, click the Connection Settings button.
3. Select Manual Proxy Configuration.
4. Next to HTTP, add the address of the proxy server and the HTTP port configured on the proxy server (usually port 8080).
5. Click OK, and OK again.
   

Internet Explorer for Windows

1. From the Tools menu, select Internet Options.
2. Select the Connection tab.
3. Select LAN Setting button.
4. Click the Use a proxy server checkbox.
5. Enter the address of the proxy server and the HTTP port configured on the proxy server (usually port 8080). If multiple proxy services are used, click Advanced, and enter the address and port number for each service.
6. Click OK and Apply.
   

Mac OS X

1. Open the Network control panel, and click the Proxies button.
2. Check Web Proxy, and enter the Web Proxy Server address and HTTP port (usually port 8080).
3. Click Apply Now.
4. Close the Network control panel window.
5. All browsers will pick up proxy settings from the operating system.