---
title: Passthrough Mode
slug: kronpam-reference-guide-3-8-0/passthrough-mode
description: Learn how to efficiently utilize the HTTP Proxy by establishing groups and policies. By configuring this feature, your end users will have restricted access to authorized web pages and sub URLs while being blocked from accessing undefined web pages. Rest 
docTags: 
createdAt: 2022-08-09T18:02:26.000Z
---

To use HTTP Proxy effectively, Device and User Groups must be defined, and necessary policy definitions must be made. After these configurations, end users can only access the web page and sub-URLs they are allowed to access. Undefined web pages will be inaccessible to end users under normal circumstances.

Thanks to the passthrough mode, end users can continue to access whatever the internal network rules allow without being subjected to any policies and rules over HTTP Proxy. However, since all traffic will be made through HTTP Proxy, all traffic will be logged. In this way, end-user behavior analytics can still be extracted and acted upon.

To use this feature, these steps must be followed:

&#x20;   sudo vi /pam/http-proxy/conf/http\_proxy.properties
&#x9;http.proxy.passthrough=true (default value false).
&#x9;\:wq!
&#x9;sudo systemctl restart pam-http

Since HTTP Proxy is in Passthrough mode, if there are predefined device definitions and policies, it will be bypassed and web traffic of all users who have permission to use HTTP Proxy on Kron PAM will not be interfered with.

The mentioned logs can be viewed under the **Logging** > **HTTP Proxy Logs** tab on Kron PAM **Web GUI.**
