Forum Discussion
Michael_Goetz From my understanding the transparent forward proxy only functions with SWG. I believe your only option if you do not wish to purchase a APM license and SWG subscription is to configure an explicit forward proxy without SSL inspection. The explicit forward proxy is pretty easy to configure following the following document. I have tested this configuration several times and it works exactly the way you describe just not a transparent forward proxy. I do want to note that if for some reason you perform DNS queries through your management interface of the BIG-IP you will need a DNS server that is accessible through one of the routed interfaces because you cannot for the DNS Resolver in this configuration to go through the management interface no matter what route you put in place because it will always want to leave one of the routed interfaces that you have virtual servers and what not associated to.