Cut-through proxy, looking for a logout function.

[andrea.meconi]

We are using a PIX as an cut-through proxy for network access using RADIUS and RSA token server.                 

We are also looking for a logout function.

Many thanks for help.

Andrea

[Jennifer Halim]

Unfortunately there is no logout function from the user's perspective.

You can configure absolute or idle timeout for the uauth/cut through proxy function: timeout uauth hh:mm:ss [absolute | inactivity]:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/t.html#wp1540870

You can however log user out from the PIX itself: clear uauth :

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/c3.html#wp2169624

Hope that helps.

[andrea.meconi]

Do ASA and PIX have the same proxy implementation?

Regards.

Andrea

[Jennifer Halim]

Yes, PIX and ASA is sharing the same code from version 7.0 onwards, with ASA supporting more features. However, feature that is both supported in PIX and ASA has the same implementation.