LAN > PROXY > PIX > > > Internet. How?

Hello

We use PIX 515E (and we are satisfied), but now I need Activate Proxy Server with some restrictions (user can´t download files .exe etc.).

Current setting: user has in Internet Explorer (for example) on the connection setting is checked "use proxy server" (192.168.1.151, port 3128) and all restrictions are applied successfully. BUT: If the user uncheck this setting - it can connect to the internet and no restrictions are applied on him - he can download whatewer he wanted.

On the old version of firewall (kerio winroute 4.2.5) I can put the packet filter rule, and only the user who put the proxy can connect to the internet.

Can you help me how I can configure PIX?

Thank you, Milan

Hello.. as the internal DNS is 192.168.1.2, you must allow access to this IP to talk to the DNS servers of the ISP.

access your lists looks like this:

access-list outbound01 permit udp host 192.168.1.2 host 194.228.2.1 eq 53

outgoing access list permit udp host 192.168.1.2 host 194.228.2.61 eq 53

outbound01 list of access permit tcp host 192.168.1.151 all http eq

outbound01 list of access permit tcp host 192.168.1.151 all https eq

make sure you nat the 192.168.1.2 host out.

Tags: Cisco Security

Similar Questions

Maybe you are looking for