Proxy client support 2012

[dcoetzee27]

Hi,

i have read previous posts for proxy support dating back to 2009. As to date QNAP still have not included Proxy client support. i support a QNAP NAS device in a small company that has an outsourced security solution which requires all connections being proxied through a proxy server.

This makes firmware updates and Antivirus updates troublesome. Please could you help me understand why Proxy Client support has not been added to the QNAP servers?

i from what i have read 2.6.0 Beta does not include a proxy client either.


Regards

[dcoetzee27]

Sorry - that line should read 3.6.0 Beta does not include a proxy client either

[schumaku]

Disputable if traffic from trusted (server) systems have to pass (Web) proxies, most designed to capture the Web traffic... As most "unwanted" traffic is http, the security advantages are minimal. And every proxy system I'm aware of can be configured to allow trusted system traffic.

Many users also associating Proxy support with many other featurs beyond, ie. a generic proxy implementation, a socks proxy, and so on. All that requires any application on the NAS to support proxy handling, too.

[dcoetzee27]

Please excuse the late reply. i have been ill and travelling.

Again, regardless of whether its going to increase security or not, proxy client support is a standard feature most products have. Our client has the necessity to proxy traffic through a central point, whihc can be managed. Punching holes through a firewall is not an acceptable solution.
People could route their http requests through the QNAP device (which do not have iptables installed/active), and gain unauthorized access to undesireable content.


Please can we have proxy client support in the QNAP devices. It will not break the development budget.

[schumaku]

What services on the NAS requiring outgoing connections to the Internet wold you need to have proxy-enabled?

[dcoetzee27]

Personally for me (my customer) - only the live update. There is a workaround to get ClamAV/Freshclam to update through the proxy, which i am happy with.

Thanks for understanding!!!

Regards
dirk

[dcoetzee27]

As of version 3.7.1 (Build 20120615), there is still no proxy client support. To get 3.7.1 installed, i needed to wait three days for a change control to be approved and update my clients QNAP device in a 'time window'. The firewall administrators (outsourced company) are bemused that QNAP has no proxy support. Is this supposed to be a SME business device? It does not have business 'logic'

[schumaku]

As of version 3.7.1 (Build 20120615), there is still no proxy client support.[/qupte] Yes, nothing in the Release Notes...

To get 3.7.1 installed, i needed to wait three days for a change control to be approved and update my clients QNAP device in a 'time window'.

That's the way ITIL processes work...not really a QNAP issue, agree? This does not change if there would be proxy support to check and grap the firmware.

The firewall administrators (outsourced company) are bemused that QNAP has no proxy support. Is this supposed to be a SME business device? It does not have business 'logic'

Well, None of my customers is pasing it's Web proxy servers from the server infrastructure for machine2machine communication. Aply for a policy excpetion - in case there is such a policy at all.

[dcoetzee27]

"That's the way ITIL processes work...not really a QNAP issue, agree? This does not change if there would be proxy support to check and grap the firmware."

There is no need to become defensive. I am pointing out that this is a huge inconvenience. And something that should be addressed. Raising a change control so an outsourced company to punch a hole in the firewall is less than desirable. Business NAS devices should have business features.

Having a policy exemption is not a solution at all. The proxy / firewall has restrictions on what sites users can browse, antivirus checking and hosts of other stuff. Having one device (the only device), exempt is illogical and trashy. The firewall engineers have explained that they would not wish to have a device - that has no firewalling capabilities - connect uninhibited on port 80 through the firewall.

In my opinion - this should be easily implemented. People have been asking for Proxy client support in QNAP since 2009.