need your advice

batumibatumi · ‎12-06-2007

Friends,

I have PIX 525 and want to divide inside interface into 3 sabinterfaces (VLANs)... Is it possable to filter internet traffic (sach as: http, xxx, traffic shapping, TCP connections, FTP and etc ....) through the PIX >>> and if it possable how do it ? My frined told me that, config WIN-PORXY or something like that and filter traffic through it ? Just do 3 subinterfaces in PIX, and open TCP, IP, UDP ports... (I think it looks pritty bed...) Need your advice what is the most way to resolve my problem ?

Regards, Batumi3

husycisco · ‎12-07-2007

Yes you can creae 3 subinterfaces and do VLAN taggigng. But PIX is not a filter device, it is a firewall. For filtering purposes, you need something that works on application layer, Websense software for example. PIX can integrate with Websense. AFAIK, PIX does not do filtering. All you can do is blocking outbound ports.

batumibatumi · ‎12-07-2007

I'm downloading WEBSENS now... there was written that i can filter HTTP, FTP, or HTTPS ... ??? Is it true ??? Do you recommend me to use Proxy server and not using WEBSENSE SERVER ??? What do you do recommend me to do in this case ? Do you know recommended configuration for PIX ... ? pleas be kind and give me the link of course if you have ! :) tnx, IN ADVANE

Regards, Batumi3

husycisco · ‎12-07-2007

I use Websense with my ASA firewall. They work great.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008088517b.shtml

http://www.chinaitlab.com/labto/cspfa/10.htm

batumibatumi · ‎12-07-2007

Great tnx... it was very kind to help me from your side...

Regards, Batumi3

husycisco · ‎12-07-2007

You are welcome Batumi. Please dont forget to rate helpful post :)