01-24-2014 07:54 AM - edited 03-11-2019 08:35 PM
Hi. Is it possible to redirect denied traffic in Cisco ASA?
For example if a user is trying to access an HTTP page which is denied to him by an access-list, then that user is redirected to another HTTP webpage.
The ultimate goal is to notify the user that the resource he is trying to access is actually denied by the access-list and not because of a network/service outage.
Is there any reasonable solution to this problem? thanks!
Solved! Go to Solution.
01-24-2014 08:04 AM
Hi,
I would imagine this would be the job of some other device other than the ASA.
If the ASA denies the traffic it then thats it.
Only thing silimiar I can think of right now would be to configure Cut Through Proxy which would ask the user for authentication when he attempts to connection to certain destination with certain port. You could also configure a message on teh ASA that would be printed to the user when the ASA shows the authentication page.
Here is one document
http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080ba6110.shtml
There is plenty of documents online about this subject though.
- Jouni
01-24-2014 08:04 AM
Hi,
I would imagine this would be the job of some other device other than the ASA.
If the ASA denies the traffic it then thats it.
Only thing silimiar I can think of right now would be to configure Cut Through Proxy which would ask the user for authentication when he attempts to connection to certain destination with certain port. You could also configure a message on teh ASA that would be printed to the user when the ASA shows the authentication page.
Here is one document
http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080ba6110.shtml
There is plenty of documents online about this subject though.
- Jouni
01-26-2014 11:39 PM
I think the cut-through proxy will work good enough.
good job Jouni, thanks.
02-02-2014 11:39 PM
unfortunately it seems that the cut-through proxy cant be applied to Anyconnect VPN users.
here is the topic I started
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide