ASA Redirection

marcusaureliusbrutus · June 2009

Hi. We are using an ASA 5500. We have a DMZ where our proxy server is located. I have a route map on our internal router that could only redirect to www traffic to its next hop ip which is the internal interface of the ASA. I have been reading that there is no policy map (route-map) capability of the ASA. Is there a way for me to redirect www traffic going through the internal interface of the ASA to be forwarded to the squid proxy in the DMZ? Also, is there a way to redirect non-www traffic as well?

Thanks.

rossonieri#1 · June 2009

hi,

i think you can do that using some short of PBR,
but i like to know your config on the internal router prior asking this question?

Ahriakin · June 2009

You could use Dynamic PAT. I would avoid using the IP of the ASA itself, use a separate one if you can but it should still work....but ALL traffic for the ports/protocols you define will fall under this rule. Anyway you specify TCP 80 as the condition for the translation from your ASA Inside interface IP to the DMZ host.

ASA Redirection

Comments