PIX - Cut-Through Proxy via HTTPS

robetrem — Fri, 21 Feb 2020 08:22:13 GMT

Sorry for that long introduction

================================

When we use SSL (AAA Secure-HTTP-CLIENT)in order to authenticate, the PIX send to the Browser a HTML form asking the userid-password. The HTML source code built and sent by the PIX indicate that the form will be send to a site using protocol HTTPS against an IP address. EX: https://(ip address of the web site).

Having that kind of URL asking for the protocol HTTPS and specifying an IP address instead of a site name is not conform to the SSL protocol and make the certificate (sent by the PIX to the browser) generate a browser alert saying that the site doesn't match. CN field in the certificate which represent the name of the site can not match an IP address.

So question is : is there a way PIX will send that form (asking the user and pswd) with the HTTPS://(name of the site) instead of the IP address.

Re: PIX - Cut-Through Proxy via HTTPS

umedryk — Thu, 08 Sep 2005 17:45:09 GMT

As far as I know, you cannot change the way it works with this IP address.

topic PIX - Cut-Through Proxy via HTTPS in Network Security

PIX - Cut-Through Proxy via HTTPS

Re: PIX - Cut-Through Proxy via HTTPS