cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
253
Views
0
Helpful
2
Replies

Can you create a static mapping with ports?

abruso
Level 1
Level 1

I want it so if someone types http://www.domain.com, they will automatically be sent to https://www.domain.com.

So can you create a static mapping that does this for you?

2 Replies 2

mostiguy
Level 6
Level 6

not really. if you were to forward port 80 from a global ip address to port 443 of an inside server, you could not then forward port 443 as well to the inside port 443.

this is just something much better achieved via the web server configuration

ehirsel
Level 6
Level 6

Using a ssl offloader is better suited for what you want to do. Port mapping on the pix does not change the protocol (http is still http and not https), it is useful for mapping services running on non-standard ports. For example if you run telent service on host 10.1.1.1 on port 51, you can do a static map for port 23 on global ip 192.168.1.1 and to the mapping, but the user is still using telent on port 23, immune to the fact that the actual telnet service is running on port 51. I.E., port mapping is another variant of pat/nat.

http and https are different because one is using encryption and the other not. I would look into using ssl offloading and a load-balancer so that you save your server cycles from ssl processing.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: