Cut-through Proxy - Authentication Local on Pix Firewall to access Web

[rsoave]

Hi everyone,

I would like to know if anybody have a sample or a cisco page that teachs to how to configure a PIX Firewall with version 6.3 to make a user that want to access internet or other resource on outside, first need to authenticate in local data base (PIX) for pre defined users with passwords.

I know, there is a configuration where a users are authenticated by a RADIUS or TACACS Server, and if anybody have a sample I would appreciate.

Thanks in advance.

[bcarroll]

aaa-server LOCAL protocol local

aaa authentication match ACL-NAME inside LOCAL

access-list ACL-NAME permit tcp any any eq www

username test password cisco

Give this a try.

BC

[rsoave]

Great BC,

This solution helps me a lot, but we can configure this way as well:

aaa authentication include http outbound 0 0 0 0 LOCAL

username cisco pass cisco