Users can't connect to server using SSL/HTTPS

[dargibson]

I'm using PAT on the outside INT and have a web server on the inside. When I set the ACL to allow HTTP the users connect with no problem, but when I change the ACL to HTTPS they can't get in.

[paddyxdoyle]

Hi,

Can you see anything in the log file on the PIX?

Also can you get an SSL connection to your web server from an internal hosts?

Rgds

Paddy

[dargibson]

The logs show a connection attempt to the serve that looks like S x.x.x.x/4200 D y.y.y.y/445 or some other number, but not 443. The HTTP logs show the same but the destination port is 80. I'll check the inside connectivity and see if it works.

[paddyxdoyle]

445 is Windows based file sharing protocol and not SSL

Rgds

Paddy

[dargibson]

I know, that's what is so strange! The user types in HTTS which should have packets destin for 443, the logs show a different port...

[paddyxdoyle]

Hi,

Have you tried telneting to port 443 on your web server through your firewall. e.g. telnet 132.132.132.1 443 then looking in the log files.

Also you can use the capture command on an access-list to sniff packets passing through your firewall.

Rgds

Paddy