Posted by White Hat on Dec 16
Is the main threat internal, or external?If it's internal, a few questions I would ask are:
Do they allow egress ICMP?
Do they allow egress SSH?
Do they allow egress DNS?
If they do allow these protocols out then an insider can probably
bypass the proxy with tools like icmptx, nstx, ssh tunneling, etc.
Do they control what browser clients use?
Does the proxy transparently redirect outbound http requests, or does
it rely on browser...