Re: PIX dnat or what ?


"Tomek W." <malytw@xxxxxxxxxxxxxx> wrote in message
news:e2vil0$ho5$1@xxxxxxxxxxxxxxxxxxxxxxx
Hi
Some one know on pix 506e is possibility to make somethink like that :
if user in lacal lan will go to any www site that pix automaticly will
make
some redirect to one specific(appointed)www site on outside


Hi,
I once did a little cowboy-trick inregards to Proxy-auth on PIX
Enable Proxy auth for the scopes and settings you want to do, fx auth on all
HTTP outbound.
This will bringup a page in the users browser telling them what you have put
in the auth-prompt Prompt command line.
The trick I did was to have something a bit more explainable that what the
PIX can give.
I did this via putting in html code in the auth-prompt.
Fx.: auth-prompt prompt <IFRAME src="http://192.168.0.254"; width="800"
height="600" scrolling="no" frameborder="0"></IFRAME>Inline Frame
The inside server on 192.168.0.254 then contained some slash page.

But in you case you could do an exception auth on the webpage on the outside
that you what the users to have, and put the URL in the IFRAME.
oh - And remember to exclude DNS, if you use an outside DNS server in your
IP settings.

I know this is not much, but it could give you some better Ideas, if so let
us know.

HTH
Martin Bilgrav



.