topic HTTP->HTTPS redirect at PIX? in Network Security

HTTP->HTTPS redirect at PIX?

admin_2 — Fri, 21 Feb 2020 06:07:23 GMT

We have a solaris box behind a pix firewall. We would like to not allow port 80 traffic to the server for security reasons and only allow 443. But if users in advertently go to the http:// URL instead of the https:// - they get a page not found error which doesn't look so good. What can you recommend to help in this situation? Something in the PIX? Other?

Re: HTTP->HTTPS redirect at PIX?

Wed, 26 Jun 2002 21:16:23 GMT

http://cco.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/cmd_ref/s.htm#xtocid20

From version 6.1, static command permits port to port translation.

Re: HTTP->HTTPS redirect at PIX?

alexis.fidalgo — Wed, 03 Jul 2002 19:49:43 GMT

ok, suppose the lan connected to inside interface is 10.0.0/24

and the webserver at 10.0.0.2

and the ip in the outside interface is 200.0.0.1

try using

nat (inside) 1 0 0

global (outside) interface

static (inside,outside) tcp interface 80 10.0.0.2 443 netmask 255.255.255.255

static (inside,outside) tcp interface 443 10.0.0.2 443 netmask 255.255.255.255

I hope it helps