Solved

Confguring SquidNT Server running on Windows 2000 and configuring Cisco Pix firewall

Posted on 2008-10-08
5
774 Views
Last Modified: 2008-10-24
FirewallHow do I configure my Squid and Cisco firewall so that I don't need to modify each of our client's browser settings.
0
Comment
Question by:grazal
  • 3
  • 2
5 Comments
 
LVL 76

Expert Comment

by:arnold
ID: 22671288
Depending on whether squidNT has wccp extensions.  You could configure the cisco device.
Another option is to define an ACL to route all port 80 requests to the squid system.

The options depend on your setup.
0
 

Author Comment

by:grazal
ID: 22679473
I'm so new to SquidNT.  I just downloaded it according to ACME instructions and installing it was straight-forward and didn't require a lot of steps to run it.  I configured one of my XP users' browser to use SquidNt as proxy and it works fine.  Now, I want to have more test users before I implement this new process.  We have about 300 Windows XP internet users (local and remote) in our network.  It would be a lot easier if I don't have to configure each ndividual browsers; but rather, need to tell Cisco PIX firewall to know that Squid is a web proxy server and allows traffic (something like that).  But I don't know how to configure PIX firewall nor Squid to make it happen.  Do you have someone who knows a lot about configuring the Cisco PIX firewall that maybe able to help us also (along with SquidNT for windows)?
0
 

Author Comment

by:grazal
ID: 22679556
Also, I don't know if SquidNT has wccp extensions.   Whoever made the SquidNT Stable 4 version, he made is simple enought to install (without going thru the  %make, %configure, wccp etc. options).  I think all of this options were integrated in the install procedure; maybe, that's why I didn't have a lot of trouble installing/configuring it (I think!).  So if there were wccp extensions, and such, I really don't know????
0
 
LVL 76

Accepted Solution

by:
arnold earned 500 total points
ID: 22684653
The problem is that if you squidnt is not wccp, the below references an ACL with a route map that might be suitable:
http://www.mombu.com/microsoft/isa-server-general/t-replace-squid-with-isa-in-cisco-access-list-1682549.html


Are these workstations members of an AD?  you can use group policy to set the browser proxy.  
Another option is to use the Local DNS server to advertise the proxy settings.
http://nscsysop.hypermart.net/setproxy.html
0
 

Author Comment

by:grazal
ID: 22691497
Hi Master Arnold,

Based on the information you gave me above and based on O'Reilly's Squid Definitive Guide, I think I can make it to work and solve my issue.  I just can't try it yet, because my Squid.conf are not complete yet, and because my ACL and http_access are not completely defined yet.  I still have some issues I had posted yesterday, but have not gotten any response yet regarding them.  

But I thank you for responding to my post.  I may be able to try the above solutions after next week  -- as soon as I get a good response to my other Squid issues..

Sincerely
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Suggested Solutions

Recently Microsoft released a brand new function called CONCAT. It's supposed to replace its predecessor CONCATENATE. But how does it work? And what's new? In this article, we take a closer look at all of this - we even included an exercise file for…
Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now