pix 515 port redirection

[rmmiller]

We have two servers server A on the inside interface and server B on a dmz interface of the pix 515. Communication between the servers is HTTP and HTTPS, we would like to disguise sort of speak the HTTP/HTTPS traffic by using a bogus port. Is this possible? would port redirection accomplish this?

thanks for your help,

[tvanginneken]

Hi,

it is possible with port redirection to use different ports than the standard http and https ports. It will certainly work from the outside to the dmz, but I'am not sure it wil work from the inside to the dmz. Maybe you can actually configure the webserver to use different ports. This way no port redirection is need for the inside users. But then you will have to configure port redirection from the outside to the dmz. Is this acceptable?

Have a look at this URL for more info:

http://www.cisco.com/warp/public/707/28.html

(please ignore the conduit commands in the examples and only have a look at the examples that use the access-list statements)

Kind Regards,

Tom

[rmmiller]

Thanks Tom for your quick response.

I will go over this info and if I have any additional questions I will post them.