topic Re: PIX-Websense , does outside interface supports integration? in Network Security

PIX-Websense , does outside interface supports integration?

vijay sanwal — Fri, 21 Feb 2020 08:31:33 GMT

My requirement is to do url filtering using websense for my lan and remote branches.

Tunnels from all branches will terminate on outside interface of my pix. As any traffic to internet ll leave the pix straight away through outside interface, how can i make my websense get http traffic from branch as well as my lan.

I am planning to perform nat on the router, which lies in front of pix.

Does outside interface support integration with websense. In this case i ll do no-nat for traffic from inside interface.

All traffic to internet will get natted/patted in router.

Re: PIX-Websense , does outside interface supports integration?

jackko — Sun, 13 Nov 2005 23:07:48 GMT

you mentioned, "Tunnels from all branches will terminate on outside interface of my pix".

i am assuming the tunnels are ipsec vpn tunnels. i was just wondering how would the pix re-route the internet traffic originated from the branch.

Re: PIX-Websense , does outside interface supports integration?

vijay sanwal — Mon, 14 Nov 2005 07:06:29 GMT

As the incoming traffic is from Tunnel source and it becomes private once its there in firewall.

I think it should work, as the incoming traffic is from Public IP while the outgoing traffic is a new private network.

Firewall should identify the traffic based on IP header.