Port redirection and HTTPS

[rob.bryson]

Will a PIX 506 v6.1 support redirection of port 443 to an internal web server? I notice there is no fixup protocol https 443 command. The intent here is to allow only HTTPS traffic to the web interface of an Exchange Server. Many thanks in advance.

[Patrick Iseli]

Yes this is possible.

example config with just one public IP:

access-list acl_out permit tcp any interface outside eq https

access-group acl_out in interface outside

static (inside,outside) tcp interface https ExchangeIP-Private https netmask 255.255.255.255 0 0

Command Reference:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00800ec9eb.html#1026694

sincerely

Patrick