Security

Reply
Occasional Contributor I

Redirecting https traffic to proxy.

Hi,

I want to redirect the https traffic to the ironport proxy.

I configured one dst-nat to this traffic, but is not working.

Anyone know how can I do this configuration?

I have tested with ESI group too, but not worked too.

I've read that dst-nat does not work with SSL.

My SSID it's configured like tunel, 802.1x and the devices will be authenticateds by MSCHAP-V2.

Kind Regards.

Re: Redirecting https traffic to proxy.

Might be worth trying to tranparently proxying the traffic.

You can do this in different ways...

 

- Set the default gateway for the VLAN that users are dropped into to be the proxy.

- SRC-NAT the VLAN users are dropped into and have the default gateway on the controller point at the proxy.

 

http://en.wikipedia.org/wiki/Proxy_server#Transparent_proxy

 

Cheers

J

Cheers
James

-------------------------------------------------------
-------------------@whereisjrw-------------------
------------------------blog-------------------------
ACCX #540 | ACMX #353 | ACDX #216 | AMFX #11
---------------------
-------------------------------------------------------

If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users via search.
Frequent Contributor II

Re: Redirecting https traffic to proxy.

What version of code are you running?

I've configured an ESI group on 6.3.1.6 code to redirect http traffic worked great.

ESI on 6.3.1.1 wasn't been able to get it working. 

 

When you configure a DST-NAT or ESI have you captured any packets? What do the packet captiures showing? 

 

 

David Dipert
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: