Installation guide

Trend Micro™ InterScan™ Web Security Virtual Appliance 6.5 Installation Guide
A-8
Protecting an HTTP or FTP Server using
Reverse Proxy
If you are protecting the HTTP server, install the HTTP scanning service in the HTTP proxy
mode and use the reverse proxy configuration.
• Define the following configuration setting in the [http] section of the pni-file
•
self_proxy=reverse —specifies operation mode
•
reverse_server —specifies the IP address of the protected HTTP server
•
reverse_server_port —specifies the TCP port of the protected HTTP
server
Note: To simplify the deployment of the reverse-proxy configuration in an
HTTP/HTTPS environment, IWSVA can listen for the incoming (HTTPS)
connection on a port specified by the [main]/secondaryport configuration
parameter, and forward this traffic without scanning to port 443 of the protected
server.
F IGURE A-1. Protecting a Dedicated Server
If you are protecting the FTP server, install the FTP scanning service and configure it to use
an FTP proxy.