Thank you very much for your help, it works like a charm now.
Here what i did to an extra while following this guide ,https://support.eset.com/kb6922/
Added my custom port to /etc/httpd/conf/httpd.conf : Listen 3333
Addedm my custom port to /etc/httpd/conf/proxy.conf: AllowConnect 443 2222 3333
Created new virtual host /etc/httpd/conf/proxy.conf
<VirtualHost *:3333>
ProxyRequests On
</VirtualHost>
Added my custom port to SElinux: semanage port -a -t http_port_t -p tcp 3333
I havent used the dynamic group, applied policy directly instead.
it might be better to create dynamic group for those clients but i couldnt figured out yet.
Because subnet is not a good way to detect roaming clients, we have got a large network. Client might be in the same subnet while off to internal network
Do you have any suggestions?
BR,
ZH