Reverse Proxy

[michael.stephen]

Can Cisco PIX and or ASA be used as a reverse proxy? It would replace current reverse proxy server by taking an outside connection and SECURELY passing this to an inside server. Requirement is not to put the inside server in a DMZ off the firewall, but leave it on the inside network. Proxy will pass http, https.

Any configuration examples would be much appreciated.

[fred.s.mollenkopf]

The PIX or the ASA will not terminate a connection as a Reverse Proxy is capable of. A connection can be established from Outside to Inside (most secure interface) but only Xlate, ACL and specific application fixup checks will be done. Additionally the PIX monitors the UDP and TCP connections and applies timeouts for connection types to prevent DoS and depending on the model it can also do advanced application inspection.

Please rate any helpful posts

Thanks

Fred