I would have to agree there. It's just putting more strain on the PIX
passing all http traffic through the PIX to the DMZ for Websense monitoring.
I would put it on the inside with the users to avoid any headaches.
----- Original Message -----
From: "Tommy Mitchell"
To:
Sent: Wednesday, May 30, 2001 7:32 AM
Subject: Re: Cisco PIX and Websense [7:6404]
> ""Moiz Badr"" wrote in message
> [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> > Hi, I hope somebody with PIX & Websense guru can help,
> > I condigured a Websense server in the DMZ on the PIX
> > 520 with 3 interfaces, now, Websense can not see the
> > users and groups i.e Windows directory services,
>
> Why does it need to be in the DMZ? The only thing talking to it is the
Pix
> itself, right? I'd have to believe you're doing more harm opening those
> services from the DMZ to the inside than you could possibly gain by
putting
> the websense server on the DMZ. Do you have some pressing reason for
doing
> this?
>
> Tommy
> FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=6445&t=6404
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
