Allow Only One IP HTTP Access 1

[Cedrick]

Hello,

New to PIX config. We would like to configure PIX to allow only one IP address (a proxy server) outbound access to HTTP related sites?

We don't have a Websense server and the examples I've seen to do what we want reference a Websense server. For example:

url-server (perimeter) host a.b.c.d
filter url 80 0 0 0 0
filter url except w.x.y.z 255.255.255.255 0 0


Would the last two lines,

filter url 80 0 0 0 0
filter url except <proxy IP> 255.255.255.255 0 0


work or is there a different way?

Thanks in advance.

 

[baddos]

The filter commands are for websense. You would do something like this....

access-list 101 permit tcp host x.x.x.x any eq 80
access-group 101 in interface inside

x.x.x.x = the ip of you proxy server.

 

[Cedrick]

Oh, like an access list on a Cisco router.

Thank you very much, baddos.