Which command should a Citrix Administrator use to configure a Content Switching virtual server for implementing the Secure Web Gateway in the transparent proxy mode?
A. add cs vserver swgVS PROXY 192.168.10.1 80 -Authn401 on -authnVsName explicit-auth-vs
B. add cs vserver swgVS PROXY ** -Authn401 on -authnVsName explicit-auth-vs
C. add cs vserver swgVS PROXY 192.168.10.1 -Authn401 on -authnVsName transparent-auth-vs
D. add cs vserver swgVS PROXY * 21 -Authn401 on -authnVsName transparent-auth-vs
explicit == explicit IP
transparent == * *
Correct Answer : B
ref > https://docs.citrix.com/en-us/netscaler-secure-web-gateway/12/proxy-modes.html
Updated link
https://docs.citrix.com/en-us/citrix-adc/current-release/forward-proxy/proxy-modes.html
@SMAN:
That’s not correct. We need a transparent proxy mode, your answer enables a proxy in explicit mode.
I think the answer must be D.
you’re wrong, buddy, what makes you think answer B enables an explicit proxy? could it be the part -authnVsName explicit-auth-vs? if so, know that explicit-auth-vs is just the name of the auth server, not a parameter for the proxy.
Correct Answer : B
add cs vserver swgVS PROXY * * -Authn401 on -authnVsName explicit-auth-vs
Example for transparent proxy: add cs vserver swgVS PROXY * *
SWG in transparent Proxy mode, you only need to specify the type (PROXY). The IP address and port are asterisks
That’s not correct. We need a transparent proxy mode, your answer enables a proxy in explicit mode.
I think the answer must be D.
ITs B madafaka !! just read the fucking doc https://docs.citrix.com/en-us/netscaler-secure-web-gateway/12/proxy-modes.html
“Transparent proxy, as the name implies, is transparent to the client. That is, the clients might not be aware that a proxy server is mediating their requests. The SWG appliance is configured in an inline deployment, and transparently accepts all HTTP and HTTPs traffic. For transparent proxy, you must configure a content switching virtual server of type PROXY, with asterisks (* *) as the IP address and port. When using the Secure Web Gateway wizard in the GUI, you do not have to specify an IP address and port.”