topic Re: Default gateway in PIX in Network Security https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116221#M617112 <HTML><HEAD></HEAD><BODY><P>Dear Izhar</P><P> Shall you explain more. I feel this is exactly what I want to do.</P><P></P><P>-----ejaj</P></BODY></HTML> Wed, 16 Apr 2003 04:53:11 GMT ejaj 2003-04-16T04:53:11Z Default gateway in PIX https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116216#M617107 <P> I want to integrate a virus scanner m/c for http taffic and mail traffic with PIX. The virus scanner m/c is required to be put at DMZ. How can I do this and how shall I write "ip route ......." command for this purpose.</P><P>--ejaj</P> Fri, 21 Feb 2020 06:39:30 GMT https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116216#M617107 ejaj 2020-02-21T06:39:30Z Re: Default gateway in PIX https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116217#M617108 <HTML><HEAD></HEAD><BODY><P></P></BODY></HTML> Mon, 31 Mar 2003 15:33:14 GMT https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116217#M617108 2003-03-31T15:33:14Z Re: Default gateway in PIX https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116218#M617109 <HTML><HEAD></HEAD><BODY><P>There isn't a good way of doing this for the pix. You possibly can do it with a router in front of or behind the pix. </P><P></P><P>For http use from the inside of your pix, you would most likely need the router between the inside int of the pix, and your userbase.</P><P></P><P>For smtp filtering in and out of your network, you can probably make this work on your own. I imagine that if you configure your mailservers to send all mail outbound through the virus scanner, that should take care of all outbound filtering. Set up the smtp filtering device with your only mx record, and that should ensure that all inbound mail is scanned</P></BODY></HTML> Mon, 31 Mar 2003 16:03:47 GMT https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116218#M617109 mostiguy 2003-03-31T16:03:47Z Re: Default gateway in PIX https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116219#M617110 <HTML><HEAD></HEAD><BODY><P>Agreed. I implemented smtp the same way already and it is working fine. Now How to do for http traffic.</P><P>--ejaj</P></BODY></HTML> Tue, 01 Apr 2003 03:54:28 GMT https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116219#M617110 ejaj 2003-04-01T03:54:28Z Re: Default gateway in PIX https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116220#M617111 <HTML><HEAD></HEAD><BODY><P>HI.</P><P></P><P>Consult the manuals/support of the content filter box you have. It probably supports acting as http proxy server, and then you can configure the workstations to use it as a proxy.</P><P></P><P>I have helped someone with a similar solution using a McAffee content filter server (don't remember the name of it). </P><P>That server had two options for configuration, and we have choosed to implement it as a proxy server + mail relay.</P><P>So the traffic was redirected to the content filter at the application level (browser and mail servers configuration), and the pix was configurred to enforce it (block direct traffic).</P><P></P><P>The other option was to place it in the path of the traffic as a transparent device.</P><P></P><P>Yizhar</P><P></P></BODY></HTML> Sun, 13 Apr 2003 19:33:52 GMT https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116220#M617111 yizhar 2003-04-13T19:33:52Z Re: Default gateway in PIX https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116221#M617112 <HTML><HEAD></HEAD><BODY><P>Dear Izhar</P><P> Shall you explain more. I feel this is exactly what I want to do.</P><P></P><P>-----ejaj</P></BODY></HTML> Wed, 16 Apr 2003 04:53:11 GMT https://community.cisco.com/t5/network-security/default-gateway-in-pix/m-p/116221#M617112 ejaj 2003-04-16T04:53:11Z