I support an ageing pix 6.3 firewall. The ruleset on this firewall has been established forsome years now. One part of the ruleset allows inbound traffic for port 443 to an internal address. All fairly standard stuff. This rule works and can be verified. My problem is that trying to connect an iPhone to the internal host at this address, other 443 traffic (ie https) works. Replacing the pix with a draytek firewall allows the iphone to connect, so no issue with the internal host setup. Has anybody come across this issue before ?. I'm happy to post the config if required.
When you say other 443 traffic (ie https) works, you mean PCs and laptops are able to connect to this same inside host from outside just not the iPone?
Yes, other 443 traffic routes through ok (its a server). my only guess is that either the cisco is filtering the 443 traffic somehow (fixup http ?) or that there is secondary traffic outbound that the pix is blocking. Just though somebody might know. The only rule on the replacment draytek is an inbound 443 rule to this server. The draytek by default allows all traffic outbound except netbios stuff.
