Managing ProxySG static bypass list?

[Ferwerda]

I have recently implemented Management Center (v1.9.1.1)  to manage many ProxySGs (most at v6.5.10.1)

Several of the proxies have a static bypass list defined.

I'm not finding where to manage those static bypass lists in the Management Center; checked in VPM, Local CPL, Central CPL... no luck.

Any advice?

 

Thanks

 

[Veritas Rex]

Hi Ferwerda,

Static bypass lists are managed in Management Center using "Scripts", but if you've only recently implemented Management Center, your Scripts area may be empty. Think of Scripts as ProxySG CLI command snippets. Here's an example of a static bypass list CLI script removing an entry and re-adding it with a comment:

proxy-services
static-bypass
remove all 23.97.72.165/32
add all 23.97.72.165/32 Skype
exit
exit

Management Center executes Scripts via SSH to the ProxySG in a configuration terminal mode context, so anything you'd normally do in an administrative SSH session to the ProxySG in that context you can do in Management Center. For example, the commands above would look like this in an administrative SSH session:

ProxySG#(config)proxy-services
ProxySG#(config proxy-services)static-bypass
ProxySG#(config static-bypass)remove all 23.97.72.165/32
ProxySG#(config static-bypass)add all 23.97.72.165/32 Skype
ProxySG#(config static-bypass)exit
ProxySG#(config proxy-services)exit

A quick way to generate the CLI commands you need is to make the desired configuration changes in the ProxySG, but don't click Apply. Instead, click Preview and save out the CLI commands into a Management Center Script.

That's the "basic" concept, but you can extend the usage of Scripts through the use of Substitution Variables and Device Attributes so you don't have to have 20 individual scripts for 20 ProxySG appliances.

Hope that helps!