cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5820
Views
0
Helpful
2
Replies

WebVPN - SSL Portal - URL Rewrite

sergio.paganoni
Level 1
Level 1

Hi,

I'm currently using WebVPN portal to access an internal web application. As I understood the router/firewall make a rewrite of each url by adding following information /PORT/IP_ADDRESS/resource. For example if I access (internally) http://192.168.1.100:81/index.html, from outside (via ssl portal) this will become https://vpn.mydomain.com/81/192.168.1.100/index.html

Now I have the following problem: the web application we are reaching have in allmost AJAX request the root (/) url as base point to do the GET request, this means that if for example the application try to load /images/test.gif it results in giving me the following WRONG get rewrite: https://vpn.mydomain.com/images/test.gif instead of the expected (right) URL https://vpn.mydomain.com/81/192.168.1.100/images/test.gif, this results that the webapplication is not usable from the portal. (the example above with the image is only to explain the problem, most problem happens on doing ajax request with the root url as base for GET request)

How may I overcome this problem?

The only solution I see is:

  • Manually change source code of the application (> 100k line of code, javascript is minimized) = not applicable
  • Using a URL rewrite somewhere (i.e. proxy?!) but I will still have some problem with https (certificate) and probably wont work

Thank you so much

1 Accepted Solution

Accepted Solutions

vabruno
Level 1
Level 1

don't think there is a solution for this because the ASA can't rewrite the URL unless the page is refreshed and that is not the case with Ajax application, you may want to try and use smart tunnels for that specific application

Sent from Cisco Technical Support iPad App

View solution in original post

2 Replies 2

vabruno
Level 1
Level 1

don't think there is a solution for this because the ASA can't rewrite the URL unless the page is refreshed and that is not the case with Ajax application, you may want to try and use smart tunnels for that specific application

Sent from Cisco Technical Support iPad App

gabriel.barrios
Level 1
Level 1

Have you try to do a Proxy Bypass at the ASA?

You will find it at:

Configuration----RemoteAccessVPN---Clientless---Advanced---ProxyBypass

You may use wildcard for your internal website.

Hope it helps

Gabriel

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: