Authentication Proxy

[cassieb]

Hi All.

I am currently using auth-proxy to Authenticate users accessing the Internet. All outbound HTTP traffic passing through the PIX would be challenged with a username and password and if authenticated, access will be given.

Now for the Question.

The requirement is to give users different access-policies based on their usernames and not their individual IP's. In other words based on the Username. Is it possible to do this on a Cisco PIX Firewall 506(E) Version 6.3(4) I am running the user Database on CSACS 3.2

[subaa]

Hi,

it seems you need the so/called downloadable ACL. Here is a link:

http://www.cisco.com/en/US/products/sw/secursw/ps5338/products_configuration_guide_chapter09186a00801fd703.html#wp391232

Bests,

Attila Suba