can pix act as a proxy ???

2000-09-11 Thread Achal Kataria

Hi,

 I just have a simple query. I have PIX firewall and just wanted to
know whether PIX could act as a proxy server for the users for accessing
internet.

Achal Kataria
[EMAIL PROTECTED]

**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: can pix act as a proxy ???

2000-09-11 Thread Kristopher B. Climie

Depends on your definition of a proxy server.  If by proxy you mean as a
cache  engine, then no, obviously not.  But if you mean as a centralized
point of exit to the internet that is capable of hiding your private
network, then yes.  By using TACACS+ or RADIUS, you can even authenticate
users.  The PIX will prompt the user for a username and password on their
first try at getting to the net, then check that u/p with the authentication
server.  Once the server respondes with that users authorization level the
user is granted/denied access to that service.

If by proxy, you mean as a URL filter, the answer is yes, by only in
conjunction with a third part piece of software like WebSense.  All user
requests are first forwarded to the WebSense server and checked for the
policy of it.  If it is acceptible, the request is then passed to the
Internet, but if it is denied the request is denied and either a custom page
can be returned to the user telling them it is a site that violates your
policy, or my favorite, returns a generic site error, making them believe
that the site is down.

K

-

Kristopher B. Climie, CCNP, CCDP
*I am in no way affiliated with any companies mentioned in this post, so
please, no flames*

"Achal Kataria" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi,

  I just have a simple query. I have PIX firewall and just wanted to
 know whether PIX could act as a proxy server for the users for accessing
 internet.

 Achal Kataria
 [EMAIL PROTECTED]

 **NOTE: New CCNA/CCDA List has been formed. For more information go to
 http://www.groupstudy.com/list/Associates.html
 _
 UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
 FAQ, list archives, and subscription info: http://www.groupstudy.com
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: can pix act as a proxy ???

2000-09-11 Thread Kenneth

I don't think that it works as a proxy server but you can enable NAT to let
people access the internet using a private ip address.

"Achal Kataria" [EMAIL PROTECTED] wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi,

  I just have a simple query. I have PIX firewall and just wanted to
 know whether PIX could act as a proxy server for the users for accessing
 internet.

 Achal Kataria
 [EMAIL PROTECTED]

 **NOTE: New CCNA/CCDA List has been formed. For more information go to
 http://www.groupstudy.com/list/Associates.html
 _
 UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
 FAQ, list archives, and subscription info: http://www.groupstudy.com
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



**NOTE: New CCNA/CCDA List has been formed. For more information go to
http://www.groupstudy.com/list/Associates.html
_
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]