topic Re: How to redirect http to https an vpn url on FDM in Network Security

How to redirect http to https an vpn url on FDM

emerson.albuquerque1 — Fri, 17 May 2019 13:13:33 GMT

Hello friends,

I have a VPN RA on Firepower 2110.

To connect on VPN, some users may type 'http://testevpnmyvpn.com.br'.

When we type https://testevpn.myvpn.com.br' it is work fine.

The customer wants set when the user type 'http://testevpnmyvpn.com.br' it is redirectly automatically to 'httpS://testevpn.myvpn.com.br'

Theres a way to set it on FDM?

Best,

Emerson Albuquerque

Re: How to redirect http to https an vpn url on FDM

GRANT3779 — Sat, 18 May 2019 13:45:09 GMT

https://community.cisco.com/t5/firepower/configure-quot-http-redirect-80-quot-in-fmc/td-p/3300379

This will point you in the correct direction.

Re: How to redirect http to https an vpn url on FDM

Marvin Rhoads — Sat, 18 May 2019 15:39:18 GMT

You cannot redirect (i.e. send an http 301 code in response to users attempting to access the Firepower device's VPN service) from a Firepower device (or from an ASA).

Users have to use "https" in the URL since the Firepower device is not listening on http (tcp/80).

(You can change the tcp port used for VPN to something non-default but that doesn't affect the (in)ability to send redirects.)