How to give proxy Internet through NAT?

You have 2 providers: one without filter and one with filter. The Internet first heard on windows server 2008 using NAT. Actually the question on the second. Because the Internet filter works through a proxy + certificate crt, the question arises how to distribute similar to the first? After reading various manuals, I assume that means windows is unable to realize. Realize precisely possible, but with crutches (will require each computer user to install the certificate + in the settings to specify a proxy) that a large number of computers very difficult to do. Think in the direction of vbox+linux, but is there in this idea the possibility of distribution of this connection? Perhaps there are other ways, which is unknown to me. Thanks in advance for your help.
April 3rd 20 at 18:53
3 answers
April 3rd 20 at 18:55
Solution
Your question from the "transparent proxy", i.e. they need to work together - a network of glands and proxy servers.
The logic is as follows (we will omit the details of the authentication), if the computer user has initiated a request to port 80 - that the network hardware needs to redirect such requests to your proxy which supports "transparent" and filtering the traffic flows are allowed. The functionality of "transparent proxy" is supported by Squid-proxy, build under Win32 too, but the rest will have to understand yourself.
Either you already talked about ways to configuret all client-side via the AD if there is one.
You choose.
April 3rd 20 at 18:57
To automatically configure a large number of computers in your organization came up with all sorts of Active Directory and the like....
April 3rd 20 at 18:59
Use GPO and distribute these certificates and proxy settings for the entire domain...

Find more questions by tags LinuxNetwork routingWindows Server