How to configure explicit web proxy to work on a custom TCP port? 

• An explicit proxy only works with port TCP/8080.
• The article shows the DNAT (Destination NAT) used to translate the configured port to be translated to port 8080.

• PAN-OS 11.0.x

  • PA-1400/3400 series

  • VM-series with at least 4 vCPU’s (older style: VM-300 or higher)

• PAN-OS 11.1.x

  • PA-1400/3400 series + PA-5400(fixed) series

  • VM-series with at least 4 vCPU’s (older style: VM-300 or higher)

• A Web browser that supports an explicit proxy
• Web Proxy License

1. Configure Destination NAT Policy to translate custom port to 8080.
2. In the example below, port TCP/6789 is used and is translated that to port TCP/8080. 
3. Using this configuration,  Clients can send proxy traffic toward 192.168.55.1 on port 6789

Web-Proxy