06-26-2002 02:16 PM - edited 02-20-2020 10:07 PM
We have a solaris box behind a pix firewall. We would like to not allow port 80 traffic to the server for security reasons and only allow 443. But if users in advertently go to the http:// URL instead of the https:// - they get a page not found error which doesn't look so good. What can you recommend to help in this situation? Something in the PIX? Other?
06-26-2002 02:16 PM
http://cco.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/cmd_ref/s.htm#xtocid20
From version 6.1, static command permits port to port translation.
07-03-2002 12:49 PM
ok, suppose the lan connected to inside interface is 10.0.0/24
and the webserver at 10.0.0.2
and the ip in the outside interface is 200.0.0.1
try using
nat (inside) 1 0 0
global (outside) interface
static (inside,outside) tcp interface 80 10.0.0.2 443 netmask 255.255.255.255
static (inside,outside) tcp interface 443 10.0.0.2 443 netmask 255.255.255.255
I hope it helps
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide