[quote]

Disable internal proxy access to Blue from other subnets: = If the proxy is activated and used for both zones (blue and green), there is the possibility to reach the blue zone from the green zone via http or https over the proxy. At this moment the zone separation produced by IPTables is bypassed. If this should be prevented, a hook needs to be set.

[end quote]

I believe this text has it backward. That checkbox is to prevent the blue zone to access any IP outside the blue network not the other way around.  If you agree I will change the text accordingly.

--