Transparent Proxy

[kk.ng]

Is it possible to redirect all traffic from inside and VPN destined for ports 80 and 443 to a proxy server in the DMZ? I do not really get the point with the static command. As far as I understood it, it is possible to redirect based on port information. However it seems to me only possible when specify each single network addresses to be redirected. I would like to just redirect everything which is HTTP and HTTPS to my proxy. Anyone an idea?

Thanks.

[scoclayton]

What you describe is more a function of a feature we call Web Cache Control Protocol (WCCP). In general, you implement this feature on a L3 gateway and when that gateway sees requests destined for TCP/80 and TCP/443 (or whatever you want really), it diverts the packet over to a Cache or Proxy server. Unfortunately, the PIX does not support WCCP. IOS does support this feature however. I do not know of a way to get a PIX to do what you described above. You may want to talk to your local Cisco account team and see if they can come up with any other options based on your network design.

Good luck.

Scott