cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
316
Views
0
Helpful
1
Replies

PIX - Cut-Through Proxy via HTTPS

robetrem
Level 1
Level 1

Sorry for that long introduction

================================

When we use SSL (AAA Secure-HTTP-CLIENT)in order to authenticate, the PIX send to the Browser a HTML form asking the userid-password. The HTML source code built and sent by the PIX indicate that the form will be send to a site using protocol HTTPS against an IP address. EX: https://(ip address of the web site).

Having that kind of URL asking for the protocol HTTPS and specifying an IP address instead of a site name is not conform to the SSL protocol and make the certificate (sent by the PIX to the browser) generate a browser alert saying that the site doesn't match. CN field in the certificate which represent the name of the site can not match an IP address.

So question is : is there a way PIX will send that form (asking the user and pswd) with the HTTPS://(name of the site) instead of the IP address.

1 Reply 1

umedryk
Level 5
Level 5

As far as I know, you cannot change the way it works with this IP address.

Review Cisco Networking for a $25 gift card