We have a hub-and-spoke VPN going with the hub being a SonicWall and the spokes being about 40 RB750G’s.
The goal: restrict access to the web on the spokes via to an allow list of URL’s.
This works great if the URL’s reference internet sites; the destination NAT rule mentioned in the wiki is being used to redirect port 80 to 8080 and the traffic goes through the proxy.
If however they reference intranet sites on the hub network, the traffic is intercepted by the proxy and not passed on.
In theory, is what I’m attempting to do possible?
–Ken