topic Re: ASA Cut through proxy configuration in Network Access Control

ASA Cut through proxy configuration

dflores83 — Sun, 10 Mar 2019 23:16:38 GMT

Hi guys,

I would like to configure limited internet access to olnly a select group of Windows AD users.

I beleive cut-through proxy will allow me to do this, just not sure how to configure it on a Cisco ASA-5510

thanks

Re: ASA Cut through proxy configuration

Collin Clark — Mon, 12 Jan 2009 22:06:07 GMT

Check this link-

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807349e7.shtml

Re: ASA Cut through proxy configuration

Ivan Martinon — Mon, 12 Jan 2009 23:12:43 GMT

The link given will definitely work however you would not be able to select access based on the AD group, if that is what you need to achieve and you have ASA version 8.0 you can work Cut-Through-Proxy together with DAP.

Using Cut-Trough-Proxy with a standard authentication server will only allow or reject depending on the authentication result, but any user within your AD schema will be able to get internet access. If you need to restrict this based o Windows Groups as well your best shot is Cut-Through-Proxy with DAP and LDAP:

http://www.cisco.com/en/US/products/ps6120/products_white_paper09186a00809fcf38.shtml

Re: ASA Cut through proxy configuration

vlmacko — Tue, 09 Nov 2010 12:16:31 GMT

Hi Ivan,

could you please give any suggestion about usage cut-through-proxy and DAP with LDAP together ?

any function config or any document on web ?

link you specified was just about DAP and there is no specified how it is possible join cut-through-proxy and DAP.

Thanks a lot,

Vladimir

Re: ASA Cut through proxy configuration

Ivan Martinon — Tue, 09 Nov 2010 17:35:41 GMT

Hi Vladimir,

I think this might help you:

http://www.cisco.com/en/US/partner/docs/security/asa/asa80/asdm60/user/guide/vpn_dap.html

Ivan

ASA Cut through proxy configuration

josedunet — Wed, 09 Nov 2011 12:17:09 GMT

Hi Ivan,

We cannot access to the doc on the link.

Can you help us ?

Thanks in advance.

ASA Cut through proxy configuration

Jatin Katyal — Sat, 08 Jun 2013 09:51:53 GMT

Its too late. But if someone else need to access it. Please try

http://www.cisco.com/en/US/docs/security/asa/asa80/asdm60/user/guide/vpn_dap.html

Jatin Katyal

ASA Cut through proxy configuration

Ravi Singh — Sun, 09 Jun 2013 04:47:50 GMT

For configuration help on Cut through Proxy on ASA 5510 you can see the following config guide.

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/access_idfw.html#wp1324095