06-24-2014 05:07 AM - edited 03-11-2019 09:22 PM
Hi all,
could anyone tell me Is it possible to configure ASA so when customer rely http://domain.com Cisco ASA rely to https://domain.com (it's similar with CName function of domain record).
P.S. resource of domain.com located behind ASA and DNS A-record rely on public ASA ip address
Thank you.
Solved! Go to Solution.
06-25-2014 03:26 AM
The ASA can not do this redirect based on URL/FQDN. You would need to find another way of doing it.
--
Please remember to select a correct answer and rate helpful posts
06-25-2014 03:26 AM
The ASA can not do this redirect based on URL/FQDN. You would need to find another way of doing it.
--
Please remember to select a correct answer and rate helpful posts
06-25-2014 03:42 AM
What version ASA are you running?
If the server has both static public and private IPs you could use NAT to redirect HTTP traffic to HTTPS based on IP.
object network PUBLIC_IP
host 1.1.1.1
object network REAL_IP
host 2.2.2.2
nat (inside,outside) static PUBLIC_IP http https
Keep in mind that you will also need a NAT statement that maintains https to the server.
--
Please remember to select a correct answer and rate helpful posts
06-25-2014 11:04 PM
Hello, Marius,
thank you for your reply. I understand that we should find another way of doing it.
From your example follow what server must work with http protocol and after ASA it will be already https protocol?
06-25-2014 11:21 PM
In my example above, any http traffic that is destined for public IP 1.1.1.1 will be translated to the private IP of 2.2.2.2 and the port will be translated to https.
http to 1.1.1.1 --> https to 2.2.2.2
--
Please remember to select a correct answer and rate helpful posts
06-25-2014 11:34 PM
Ok, but it highly neccessery to force customer using https until ASA, and it not very critical what we using https inside network.
06-25-2014 11:36 PM
Then you need to find a different solution...you might want to look at solutions such as clientless SSL VPN, Citrix, or similar.
--
Please remember to select a correct answer and rate helpful posts
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide