Authenticate web traffic thru PIX to RADIUS

armonk_netdesk · ‎09-11-2007

Hi,

What I am trying to do is authenticate internal users going out to the internet thru a PIX running latest IOS 8.02. Basically the PIX should intercept the new outbound session and redirect the user to a web server where they are prompted for userid and password. This web server then sends the info back to the PIX which authenticates it to a RADIUS server. If the login is good then the user session resumes outbound to the original web request.

Is this possible?? Thanks

acomiskey · ‎09-11-2007

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/a1.html#wp1509813

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/a1.html#wp1501912

armonk_netdesk · ‎09-12-2007

Thanks, so what I gather from these docs is that it is not possible to have the PIX redirect authentication to a separate web server. The docs only indicate ways to authenticate users internally on the PIX. I guess I'll have to go to another vendor for this functionality.