See RE: Access Internet via the corporate PIX [7:73563]
If this is not the answer, be more specific.
Martijn
>>
Build the tunnel first. Use HQ or RO dns. Make sure users cannot HTTP direct
through firewall, enable direct HTTPS trough it if you want. MAybe also no
ftp etc, no direct dns?
I believe you need an inside next hop proxy-server. Until 6.2 atleast pix
does not route ip between 2 ipsec tunnels.
User's Get request forwarded to deamon through tunnel, fetched from cache or
Inet, reply to browser through tunnel.
Proxy will also do a nice job filtering mobile code and keeping surfing
behaviour in line with policies.
I'd say you should already should have it.
Martijn
Martijn
-Oorspronkelijk bericht-
Van: zak spaniol [mailto:[EMAIL PROTECTED]
Verzonden: dinsdag 5 augustus 2003 16:49
Aan: [EMAIL PROTECTED]
Onderwerp: Pix 506e, 1721 router [7:73521]
I have (2) 1721 routers and (2) Pix 506e. I want to configure them for
point-to-point with remote site going through host site for internet
access. How do I configure PIX, what info do I ned to configure it? How do
I configure routers to communicate with Pix? Any help would be great.
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=73594&t=73521
--
**Please support GroupStudy by purchasing from the GroupStudy Store:
http://shop.groupstudy.com
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
