PIX-Websense , does outside interface supports integration?

[vijay sanwal]

My requirement is to do url filtering using websense for my lan and remote branches.

Tunnels from all branches will terminate on outside interface of my pix. As any traffic to internet ll leave the pix straight away through outside interface, how can i make my websense get http traffic from branch as well as my lan.

I am planning to perform nat on the router, which lies in front of pix.

Does outside interface support integration with websense. In this case i ll do no-nat for traffic from inside interface.

All traffic to internet will get natted/patted in router.

[jackko]

you mentioned, "Tunnels from all branches will terminate on outside interface of my pix".

i am assuming the tunnels are ipsec vpn tunnels. i was just wondering how would the pix re-route the internet traffic originated from the branch.

[vijay sanwal]

As the incoming traffic is from Tunnel source and it becomes private once its there in firewall.

I think it should work, as the incoming traffic is from Public IP while the outgoing traffic is a new private network.

Firewall should identify the traffic based on IP header.