Accessing PIX from your workstation.

[mmali]

Hi,

Iam trying to access my pix firewall from my workstaion internet explorer browser, but iam not able to.

My workstation is in a floor vlan, and pix is in another subnet, i can telnet the pix. and configure it.

but iam not able to access it from my browser.

I check the

Internet Options>>>Connections>>>Lan Setting>>>Bypass proxy server for local addresses.

Please help.

Regards

Mudassir

[syghafoor]

Hi Mudassir,

By default you shouldn't be able to access the pix via https connection unless you have enabled http server the accessing from an ip address which is already defined in config.

Let say for example your machines ip address is 1.1.1.1

so the command syntax would be

http 1.1.1.1 255.255.255.255

should be your facing interface to the pix firewall.

If the above doesn't work then go to config mode and run "setup" and it will prompt you for "ip address of host running pix device manager" provide your host ip address.

Also make sure that you are able host name and domain name.

If the above doesn't work then you might now have pdm software installed on the pix. Please refer to the following url.

http://www.cisco.com/warp/public/110/pdm_http404.shtml

I hope this helps.

thanks,

Syed

[mmali]

Salam Syed,

Here it is already there in configuration.

http server enable

http 172.20.30.0 255.255.255.0 inside

I cannot run setup because it is live.

pix ip add 172.20.11.10 inside.

from my browser iam trying http://172.20.11.10

please advice.

[mpalardy]

try this:

https://172.20.11.10

[mmali]

Yes this is what iam trying.

It gives me this error.

Problem Report

Condition TCP error was detected while attempting to retrieve the URL: 'https://172.20.11.10:443/'.

--------------------------------------------------------------------------------

Problem Description: TCP/IP processing failure.

Try RELOADING the page.

This error message means that the target host did not properly respond to HTTP GET request after successfully establishing TCP connection. This may be due to problems like congestion on target host or transmission path.

If this problem persists for extended periods of time, contact your network support team. Please, first make sure that the target is really reachable and not, for example, out of service due to maintenance.

Current G

[syghafoor]

can you run debug ssl on the pix and then try to make a connection from your machine. https://172.20.11.10

Lets see if you are even hitting the pix on ssl connection.

thanks,

Syed

[mmali]

Another user in different valn is able to access the pix through https://172.20.11.10

[mpalardy]

3 questions to try to help:

1) Does your browser supports 128bits encryption. (I took it from by MS-IE into general menu 'about IE' folder). If you dont have this component installed, PDM will not work.

2)What's happening when you deactivate your proxy and try https://172.20.11.10

3)Do you have 'http yourIP interface'

Mike