cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1014
Views
0
Helpful
2
Replies

HTTP->HTTPS redirect at PIX?

admin_2
Level 3
Level 3

We have a solaris box behind a pix firewall. We would like to not allow port 80 traffic to the server for security reasons and only allow 443. But if users in advertently go to the http:// URL instead of the https:// - they get a page not found error which doesn't look so good. What can you recommend to help in this situation? Something in the PIX? Other?

2 Replies 2

Not applicable

http://cco.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/cmd_ref/s.htm#xtocid20

From version 6.1, static command permits port to port translation.

ok, suppose the lan connected to inside interface is 10.0.0/24

and the webserver at 10.0.0.2

and the ip in the outside interface is 200.0.0.1

try using

nat (inside) 1 0 0

global (outside) interface

static (inside,outside) tcp interface 80 10.0.0.2 443 netmask 255.255.255.255

static (inside,outside) tcp interface 443 10.0.0.2 443 netmask 255.255.255.255

I hope it helps

Review Cisco Networking for a $25 gift card