Draytek VIGOR2860 series User Manual page 395

Access Method There are three modes for you to choose.
Disable – the profile will be inactive. If you choose Disable, all
the web proxy profile appeared under VPN remote dial-in web
page will disappear.
Secured Port Redirection – such technique applies private
port mapping to random WAN port. There are two restrictions
for proxy web server for such selection: 1) it is only used for
WAN to LAN access, the web server must be configured behind
vigor router; 2) web server gateway must be indicated to vigor
router. In addition, users must execute "Connect" manually in
SSL Client Portal page.
SSL – if you choose such selection, web proxy over SSL will be
applied for VPN.
After finishing all the settings here, please click OK to save the configuration.
Vigor2860 Series User's Guide 379