When to use no fixup for http on PIX515E??

[smkopinski]

Taking control of local network after splitting from home office. The no fixup protocol http 80 in config of PIX. Anyone guess as to why? Not running H2H2. Just curious.

[Patrick Iseli]

It enables logging, for example in syslog messages, for GET web pages for statistics.

Command reference

fixup protocol http

The fixup protocol http command sets the port for Hypertext Transfer Protocol (HTTP) traffic application inspection. The default port for HTTP is 80.

Use the port option to change the default port assignments from 80. Use the port-port option to apply HTTP application inspection to a range of port numbers.

Note The no fixup protocol http command still enables the filter url command.

HTTP inspection performs several functions:

•URL logging of GET messages

•URL screening through N2H2 or Websense

•Java and ActiveX filtering

The latter two features must be configured in conjuction with the filter command.

See:http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727a8.html#wp1067379

sincerely

Patrick