topic Re: A Simple Question about Cut Through Proxy in Network Security

A Simple Question about Cut Through Proxy

tdhb..hiq — Mon, 11 Mar 2019 19:38:58 GMT

Hi All,

We are looking at using Cut Through Proxy authentication, but I have a question about shared computers, ie Citrix. How does the firewall open up access once the user is authenticated? Is it by host MAC address, in which case would open up the Citrix server to have the same access as the user which authenticated.

If anyone can shed some light on this it would be appreciatd.

Scott

Re: A Simple Question about Cut Through Proxy

mirober2 — Mon, 24 Jan 2011 16:40:29 GMT

Hi Scott,

The cut through proxy feature creates an authenticated session between the source IP address and the authenticated username. Therefore, if one user logs in to the Citrix server and successfully authenticates, all connections from that server's IP address will be considered authenticated as well. You can see these sessions in the 'show uauth' output on the ASA.

Hope that helps.

-Mike

Re: A Simple Question about Cut Through Proxy

tdhb..hiq — Mon, 24 Jan 2011 19:32:21 GMT

Thanks Mike.

I thought something like that would be the case, but I could not find in the Cisco docs.

Cheers

Scott