vFirewall Security Proxy

Squid Proxy

...

:3128 SSL Bump

Suricata IDS

...

rules

ClamAV

...

signatures

c-icap

...

:1344 ICAP

SOCKS5

...

:1080 Dante

Threats Detected

—

last 24h

CA Certificate SHA-256 Fingerprint (verify after download) 7C:A3:75:18:7D:B3:AF:B2:FC:66:5C:F8:B3:9C:2B:43:26:68:EF:5E:F3:13:F7:09:8D:CE:D0:ED:62:DF:86:7E

Download CA & Setup Guide

Chọn nền tảng để xem hướng dẫn cài đặt proxy + CA certificate

📱 Android

🍎 iOS / iPadOS

🖥 Windows

💻 macOS

🐧 Linux

Android

⭳ Download CA Certificate (.der)

1 Cài CA Certificate

Download file .der ở trên qua Chrome trên Android.
Mở Settings → Security → Encryption & credentials
Chọn Install a certificate → CA certificate
Xác nhận cảnh báo → chọn file vừa download → đặt tên vFirewall Proxy CA

2 Cấu hình Proxy WiFi

Settings → Wi-Fi → nhấn giữ mạng đang kết nối → Modify network
Advanced → Proxy → Manual

Hostname: 160.25.146.188
Port: 3128
Bypass: localhost,127.0.0.1,10.*,192.168.*

3 Proxy toàn bộ (ADB)

Kết nối USB, bật USB Debugging, chạy trên máy tính:

adb shell settings put global http_proxy 160.25.146.188:3128

Gỡ bỏ:

adb shell settings put global http_proxy :0

Lưu ý: Android 7+ chỉ trust CA do user cài cho Chrome/browser. Các app khác cần MDM hoặc root để trust system-wide.

4 Kiểm tra

Mở Chrome → truy cập https://example.com
Nhấn ổ khoá → Certificate → Issuer phải hiện vFirewall Proxy CA

iOS / iPadOS

⭳ Download CA Certificate (.der)

Bắt buộc: Mở link download bằng Safari (không dùng Chrome/app khác).

1 Download & Install Profile

Nhấn nút download ở trên bằng Safari
Safari hiện "This website is trying to download a configuration profile" → nhấn Allow
Mở Settings → thấy Profile Downloaded → nhấn vào
Install → nhập Passcode → Install → Done

2 Bật Full Trust (quan trọng!)

Settings → General → About → Certificate Trust Settings
Tìm vFirewall Proxy CA → bật toggle Enable Full Trust
Xác nhận Continue

Không làm bước 2 thì cert có cài nhưng KHÔNG được trust — HTTPS sẽ vẫn lỗi.

3 Cấu hình Proxy

Settings → Wi-Fi → nhấn (i) bên cạnh mạng WiFi
Cuộn xuống HTTP Proxy → chọn Manual

Server: 160.25.146.188
Port: 3128
Authentication: Off

4 Kiểm tra

Safari → https://example.com → nhấn ổ khoá → Issued by: vFirewall Proxy CA

Windows 10 / 11

⭳ Download CA Certificate (.der)

1 Cài CA Certificate

Cách nhanh: Double-click file .der vừa download
Nhấn Install Certificate... → Local Machine → Next
Chọn Place all certificates in the following store → Browse → Trusted Root Certification Authorities
Next → Finish → xác nhận Yes

Hoặc dùng Command Prompt (Admin):

certutil -addstore "Root" vFirewall-Proxy-CA.der

Hoặc PowerShell (Admin):

Import-Certificate -FilePath ".\vFirewall-Proxy-CA.der" `
  -CertStoreLocation Cert:\LocalMachine\Root

2 Cấu hình Proxy

Settings → Network & Internet → Proxy
Bật Use a proxy server

Address: 160.25.146.188
Port: 3128
Bypass: localhost;127.0.0.1;10.*;192.168.*;*.internal

Hoặc Command Prompt:

netsh winhttp set proxy proxy-server="160.25.146.188:3128" bypass-list="localhost;127.0.0.1;10.*;192.168.*;*.internal"

Firefox: dùng trust store riêng — cần import CA trong Firefox: Settings → Privacy & Security → Certificates → View Certificates → Authorities → Import → chọn file .der

3 Kiểm tra

Mở Edge/Chrome → https://example.com → nhấn ổ khoá → Certificate → Issued by: vFirewall Proxy CA

curl -v -x http://160.25.146.188:3128 https://example.com 2>&1 | findstr "issuer"

macOS

⭳ Download CA Certificate (.pem)

1 Cài CA Certificate

GUI: Double-click file .pem → Keychain Access mở → chọn Keychain: System → Add
Tìm vFirewall Proxy CA → double-click → mở Trust → đổi thành Always Trust → đóng → nhập password

Hoặc Terminal:

sudo security add-trusted-cert -d -r trustRoot \
  -k /Library/Keychains/System.keychain vFirewall-Proxy-CA.pem

2 Cấu hình Proxy

System Settings → Network → chọn Wi-Fi / Ethernet
Details... → Proxies → Bật Web Proxy + Secure Web Proxy

Server: 160.25.146.188
Port: 3128
Bypass: localhost, 127.0.0.1, 10.*, 192.168.*, *.internal

Hoặc Terminal:

sudo networksetup -setwebproxy "Wi-Fi" 160.25.146.188 3128
sudo networksetup -setsecurewebproxy "Wi-Fi" 160.25.146.188 3128
sudo networksetup -setsocksfirewallproxy "Wi-Fi" 160.25.146.188 1080

Environment variables (cho terminal tools):

# Thêm vào ~/.zshrc
export http_proxy="http://160.25.146.188:3128"
export https_proxy="http://160.25.146.188:3128"
export all_proxy="socks5://160.25.146.188:1080"
export no_proxy="localhost,127.0.0.1,10.*,192.168.*,.internal"

Firefox: dùng trust store riêng — cần import CA: Preferences → Privacy & Security → Certificates → View Certificates → Import

3 Kiểm tra

curl -v -x http://160.25.146.188:3128 https://example.com 2>&1 | grep issuer
# issuer: C=VN; ST=HCMC; O=vFirewall Security Proxy; CN=vFirewall Proxy CA

Linux (Ubuntu / Debian / CentOS / RHEL)

⭳ Download CA Certificate (.pem)

1 Cài CA Certificate

Ubuntu / Debian:

sudo cp vFirewall-Proxy-CA.pem /usr/local/share/ca-certificates/vfirewall-proxy-ca.crt
sudo update-ca-certificates

CentOS / RHEL / Fedora:

sudo cp vFirewall-Proxy-CA.pem /etc/pki/ca-trust/source/anchors/vfirewall-proxy-ca.pem
sudo update-ca-trust

2 Cấu hình Proxy (system-wide)

sudo tee /etc/profile.d/proxy.sh <<'EOF'
export http_proxy="http://160.25.146.188:3128"
export https_proxy="http://160.25.146.188:3128"
export all_proxy="socks5://160.25.146.188:1080"
export no_proxy="localhost,127.0.0.1,10.0.0.0/8,192.168.0.0/16,.internal"
export HTTP_PROXY="$http_proxy"
export HTTPS_PROXY="$https_proxy"
export NO_PROXY="$no_proxy"
EOF
source /etc/profile.d/proxy.sh

APT proxy (Debian/Ubuntu):

sudo tee /etc/apt/apt.conf.d/95proxy <<'EOF'
Acquire::http::Proxy "http://160.25.146.188:3128";
Acquire::https::Proxy "http://160.25.146.188:3128";
EOF

Git / Docker / npm / pip:

# Git
git config --global http.proxy http://160.25.146.188:3128

# Docker
sudo mkdir -p /etc/systemd/system/docker.service.d
sudo tee /etc/systemd/system/docker.service.d/proxy.conf <<'EOF'
[Service]
Environment="HTTP_PROXY=http://160.25.146.188:3128"
Environment="HTTPS_PROXY=http://160.25.146.188:3128"
EOF
sudo systemctl daemon-reload && sudo systemctl restart docker

# npm
npm config set proxy http://160.25.146.188:3128

# pip
pip install --proxy http://160.25.146.188:3128 package_name

3 Kiểm tra

curl -v -x http://160.25.146.188:3128 https://example.com 2>&1 | grep issuer
# issuer: C=VN; ST=HCMC; O=vFirewall Security Proxy; CN=vFirewall Proxy CA

# Test SOCKS5
curl --socks5 160.25.146.188:1080 http://example.com