HTTP->HTTPS redirect at PIX?

admin_2 · ‎06-26-2002

We have a solaris box behind a pix firewall. We would like to not allow port 80 traffic to the server for security reasons and only allow 443. But if users in advertently go to the http:// URL instead of the https:// - they get a page not found error which doesn't look so good. What can you recommend to help in this situation? Something in the PIX? Other?

Report Inappropriate Content · ‎06-26-2002

http://cco.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_61/cmd_ref/s.htm#xtocid20

From version 6.1, static command permits port to port translation.

alexis.fidalgo · ‎07-03-2002

ok, suppose the lan connected to inside interface is 10.0.0/24

and the webserver at 10.0.0.2

and the ip in the outside interface is 200.0.0.1

try using

nat (inside) 1 0 0

global (outside) interface

static (inside,outside) tcp interface 80 10.0.0.2 443 netmask 255.255.255.255

static (inside,outside) tcp interface 443 10.0.0.2 443 netmask 255.255.255.255

I hope it helps