vFirewall Security Proxy

Proxy trung tâm chống malware — SSL Inspection + ClamAV + Suricata IDS
Squid Proxy
...
:3128 SSL Bump
Suricata IDS
...
rules
ClamAV
...
signatures
c-icap
...
:1344 ICAP
SOCKS5
...
:1080 Dante
Threats Detected
—
last 24h
HTTP / HTTPS Proxy
160.25.146.188:3128
SOCKS5 Proxy
160.25.146.188:1080
Proxy Login
proxy / vFirewall@2026
CA Certificate
vFirewall Proxy CA
Valid Until
2036-11-03
CA Certificate SHA-256 Fingerprint (verify after download) 7C:A3:75:18:7D:B3:AF:B2:FC:66:5C:F8:B3:9C:2B:43:26:68:EF:5E:F3:13:F7:09:8D:CE:D0:ED:62:DF:86:7E

Connected Clients

Danh sach IP client dang ket noi qua proxy — tu dong cap nhat moi 15 giay

- Active
- Idle
- Offline
Status Client IP User Requests Traffic Denied Last Seen Top Domains
Loading client data...

Download CA & Setup Guide

Chọn nền tảng để xem hướng dẫn cài đặt proxy + CA certificate

📱 Android
🍎 iOS / iPadOS
🖥 Windows
💻 macOS
🐧 Linux

Android

⭳ Download CA Certificate (.der)
1 Cài CA Certificate
Download file .der ở trên qua Chrome trên Android.
Mở Settings → Security → Encryption & credentials
Chọn Install a certificate → CA certificate
Xác nhận cảnh báo → chọn file vừa download → đặt tên vFirewall Proxy CA
2 Cấu hình Proxy WiFi
Settings → Wi-Fi → nhấn giữ mạng đang kết nối → Modify network
Advanced → Proxy → Manual
Hostname: 160.25.146.188
Port: 3128
Bypass: localhost,127.0.0.1,10.*,192.168.*
Xác thực Proxy: Khi trình duyệt yêu cầu đăng nhập:
Username: proxy   Password: vFirewall@2026
3 Proxy toàn bộ (ADB)
Kết nối USB, bật USB Debugging, chạy trên máy tính:
adb shell settings put global http_proxy 160.25.146.188:3128
Gỡ bỏ:
adb shell settings put global http_proxy :0
Lưu ý: Android 7+ chỉ trust CA do user cài cho Chrome/browser. Các app khác cần MDM hoặc root để trust system-wide.
4 Kiểm tra
Mở Chrome → truy cập https://example.com
Nhấn ổ khoá → Certificate → Issuer phải hiện vFirewall Proxy CA

iOS / iPadOS

⭳ Download CA Certificate (.der)
Bắt buộc: Mở link download bằng Safari (không dùng Chrome/app khác).
1 Download & Install Profile
Nhấn nút download ở trên bằng Safari
Safari hiện "This website is trying to download a configuration profile" → nhấn Allow
Mở Settings → thấy Profile Downloaded → nhấn vào
Install → nhập Passcode → Install → Done
2 Bật Full Trust (quan trọng!)
Settings → General → About → Certificate Trust Settings
Tìm vFirewall Proxy CA → bật toggle Enable Full Trust
Xác nhận Continue
Không làm bước 2 thì cert có cài nhưng KHÔNG được trust — HTTPS sẽ vẫn lỗi.
3 Cấu hình Proxy
Settings → Wi-Fi → nhấn (i) bên cạnh mạng WiFi
Cuộn xuống HTTP Proxy → chọn Manual
Server: 160.25.146.188
Port: 3128
Authentication: ON
Username: proxy
Password: vFirewall@2026
4 Kiểm tra
Safari → https://example.com → nhấn ổ khoá → Issued by: vFirewall Proxy CA

Windows 10 / 11

⭳ Download CA Certificate (.der) ⚙ Download Auto-Setup Script (.cmd)
Setup nhanh: Download cả 2 file vào cùng thư mục → Click chuột phải vfirewall-proxy-setup.cmd → Run as administrator
Script sẽ tự động: xóa proxy cũ, cài CA certificate, cấu hình proxy mới, và hiển thị kết quả kiểm tra.
1 Cài CA Certificate (thủ công)
Cách nhanh: Double-click file .der vừa download
Nhấn Install Certificate... → Local Machine → Next
Chọn Place all certificates in the following store → Browse → Trusted Root Certification Authorities
Next → Finish → xác nhận Yes

Hoặc dùng Command Prompt (Admin):
certutil -addstore "Root" vFirewall-Proxy-CA.der
Hoặc PowerShell (Admin):
Import-Certificate -FilePath ".\vFirewall-Proxy-CA.der" `
  -CertStoreLocation Cert:\LocalMachine\Root
2 Cấu hình Proxy (thủ công)
Settings → Network & Internet → Proxy
Bật Use a proxy server
Address: 160.25.146.188
Port: 3128
Bypass: localhost;127.0.0.1;10.*;192.168.*;*.internal;secure-proxy.fwcloud.vn
Hoặc Command Prompt (Admin):
netsh winhttp set proxy proxy-server="160.25.146.188:3128" bypass-list="localhost;127.0.0.1;10.*;192.168.*;*.internal;secure-proxy.fwcloud.vn"
3 Xác thực Proxy
Khi truy cập web lần đầu, trình duyệt sẽ hiện popup yêu cầu đăng nhập:
Username: proxy
Password: vFirewall@2026
Lưu ý: Tick "Remember my credentials" để không phải nhập lại.
Firefox: dùng trust store riêng — cần import CA trong Firefox: Settings → Privacy & Security → Certificates → View Certificates → Authorities → Import → chọn file .der
4 Gỡ bỏ Proxy
Chạy Command Prompt (Admin):
netsh winhttp reset proxy
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyEnable /f
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyServer /f
reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v ProxyOverride /f
5 Kiểm tra
Mở Edge/Chrome → https://example.com → nhấn ổ khoá → Certificate → Issued by: vFirewall Proxy CA
curl -v -x http://proxy:vFirewall@2026@160.25.146.188:3128 https://example.com 2>&1 | findstr "issuer"

macOS

⭳ Download CA Certificate (.pem)
1 Cài CA Certificate
GUI: Double-click file .pem → Keychain Access mở → chọn Keychain: System → Add
Tìm vFirewall Proxy CA → double-click → mở Trust → đổi thành Always Trust → đóng → nhập password

Hoặc Terminal:
sudo security add-trusted-cert -d -r trustRoot \
  -k /Library/Keychains/System.keychain vFirewall-Proxy-CA.pem
2 Cấu hình Proxy
System Settings → Network → chọn Wi-Fi / Ethernet
Details... → Proxies → Bật Web Proxy + Secure Web Proxy
Server: 160.25.146.188
Port: 3128
Username: proxy
Password: vFirewall@2026
Bypass: localhost, 127.0.0.1, 10.*, 192.168.*, *.internal
Hoặc Terminal:
sudo networksetup -setwebproxy "Wi-Fi" 160.25.146.188 3128 on proxy vFirewall@2026
sudo networksetup -setsecurewebproxy "Wi-Fi" 160.25.146.188 3128 on proxy vFirewall@2026
sudo networksetup -setsocksfirewallproxy "Wi-Fi" 160.25.146.188 1080
Environment variables (cho terminal tools):
# Thêm vào ~/.zshrc
export http_proxy="http://proxy:vFirewall@2026@160.25.146.188:3128"
export https_proxy="http://proxy:vFirewall@2026@160.25.146.188:3128"
export all_proxy="socks5://160.25.146.188:1080"
export no_proxy="localhost,127.0.0.1,10.*,192.168.*,.internal"
Firefox: dùng trust store riêng — cần import CA: Preferences → Privacy & Security → Certificates → View Certificates → Import
3 Kiểm tra
curl -v -x http://160.25.146.188:3128 https://example.com 2>&1 | grep issuer
# issuer: C=VN; ST=HCMC; O=vFirewall Security Proxy; CN=vFirewall Proxy CA

Linux (Ubuntu / Debian / CentOS / RHEL)

⭳ Download CA Certificate (.pem)
1 Cài CA Certificate
Ubuntu / Debian:
sudo cp vFirewall-Proxy-CA.pem /usr/local/share/ca-certificates/vfirewall-proxy-ca.crt
sudo update-ca-certificates
CentOS / RHEL / Fedora:
sudo cp vFirewall-Proxy-CA.pem /etc/pki/ca-trust/source/anchors/vfirewall-proxy-ca.pem
sudo update-ca-trust
2 Cấu hình Proxy (system-wide)
Xác thực Proxy: Username: proxy   Password: vFirewall@2026
sudo tee /etc/profile.d/proxy.sh <<'EOF'
export http_proxy="http://proxy:vFirewall@2026@160.25.146.188:3128"
export https_proxy="http://proxy:vFirewall@2026@160.25.146.188:3128"
export all_proxy="socks5://160.25.146.188:1080"
export no_proxy="localhost,127.0.0.1,10.0.0.0/8,192.168.0.0/16,.internal"
export HTTP_PROXY="$http_proxy"
export HTTPS_PROXY="$https_proxy"
export NO_PROXY="$no_proxy"
EOF
source /etc/profile.d/proxy.sh
APT proxy (Debian/Ubuntu):
sudo tee /etc/apt/apt.conf.d/95proxy <<'EOF'
Acquire::http::Proxy "http://proxy:vFirewall@2026@160.25.146.188:3128";
Acquire::https::Proxy "http://proxy:vFirewall@2026@160.25.146.188:3128";
EOF
Git / Docker / npm / pip:
# Git
git config --global http.proxy http://proxy:vFirewall@2026@160.25.146.188:3128

# Docker
sudo mkdir -p /etc/systemd/system/docker.service.d
sudo tee /etc/systemd/system/docker.service.d/proxy.conf <<'EOF'
[Service]
Environment="HTTP_PROXY=http://160.25.146.188:3128"
Environment="HTTPS_PROXY=http://160.25.146.188:3128"
EOF
sudo systemctl daemon-reload && sudo systemctl restart docker

# npm
npm config set proxy http://160.25.146.188:3128

# pip
pip install --proxy http://160.25.146.188:3128 package_name
3 Kiểm tra
curl -v -x http://160.25.146.188:3128 https://example.com 2>&1 | grep issuer
# issuer: C=VN; ST=HCMC; O=vFirewall Security Proxy; CN=vFirewall Proxy CA

# Test SOCKS5
curl --socks5 160.25.146.188:1080 http://example.com

Kiem thu Virus Scanning

Kiem tra proxy co chan duoc malware/virus khi download qua HTTPS hay khong (EICAR test file)

EICAR Test File la gi?
EICAR la file test chuẩn được mọi antivirus công nhận. File này không phải virus thật nhưng mọi engine quét virus đều nhận diện nó. Dùng để kiểm chứng hệ thống bảo mật hoạt động đúng.
🔍
Nhan Test de kiem tra
Ket qua mong doi: Proxy CHAN download va tra ve trang loi 403 Forbidden hoac thong bao virus detected. Neu file download thanh cong thi ClamAV/ICAP chua hoat dong dung.
Test bang command line:
# Windows (qua proxy)
curl -x http://proxy:vFirewall@2026@160.25.146.188:3128 https://secure.eicar.org/eicar.com

# macOS / Linux
curl -v -x http://proxy:vFirewall@2026@160.25.146.188:3128 https://secure.eicar.org/eicar.com

# Ket qua mong doi: HTTP 403 Forbidden (virus blocked by ClamAV)