Solved

Confguring SquidNT Server running on Windows 2000 and configuring Cisco Pix firewall

Posted on 2008-10-08
5
781 Views
Last Modified: 2008-10-24
FirewallHow do I configure my Squid and Cisco firewall so that I don't need to modify each of our client's browser settings.
0
Comment
Question by:grazal
  • 3
  • 2
5 Comments
 
LVL 77

Expert Comment

by:arnold
ID: 22671288
Depending on whether squidNT has wccp extensions.  You could configure the cisco device.
Another option is to define an ACL to route all port 80 requests to the squid system.

The options depend on your setup.
0
 

Author Comment

by:grazal
ID: 22679473
I'm so new to SquidNT.  I just downloaded it according to ACME instructions and installing it was straight-forward and didn't require a lot of steps to run it.  I configured one of my XP users' browser to use SquidNt as proxy and it works fine.  Now, I want to have more test users before I implement this new process.  We have about 300 Windows XP internet users (local and remote) in our network.  It would be a lot easier if I don't have to configure each ndividual browsers; but rather, need to tell Cisco PIX firewall to know that Squid is a web proxy server and allows traffic (something like that).  But I don't know how to configure PIX firewall nor Squid to make it happen.  Do you have someone who knows a lot about configuring the Cisco PIX firewall that maybe able to help us also (along with SquidNT for windows)?
0
 

Author Comment

by:grazal
ID: 22679556
Also, I don't know if SquidNT has wccp extensions.   Whoever made the SquidNT Stable 4 version, he made is simple enought to install (without going thru the  %make, %configure, wccp etc. options).  I think all of this options were integrated in the install procedure; maybe, that's why I didn't have a lot of trouble installing/configuring it (I think!).  So if there were wccp extensions, and such, I really don't know????
0
 
LVL 77

Accepted Solution

by:
arnold earned 500 total points
ID: 22684653
The problem is that if you squidnt is not wccp, the below references an ACL with a route map that might be suitable:
http://www.mombu.com/microsoft/isa-server-general/t-replace-squid-with-isa-in-cisco-access-list-1682549.html


Are these workstations members of an AD?  you can use group policy to set the browser proxy.  
Another option is to use the Local DNS server to advertise the proxy settings.
http://nscsysop.hypermart.net/setproxy.html
0
 

Author Comment

by:grazal
ID: 22691497
Hi Master Arnold,

Based on the information you gave me above and based on O'Reilly's Squid Definitive Guide, I think I can make it to work and solve my issue.  I just can't try it yet, because my Squid.conf are not complete yet, and because my ACL and http_access are not completely defined yet.  I still have some issues I had posted yesterday, but have not gotten any response yet regarding them.  

But I thank you for responding to my post.  I may be able to try the above solutions after next week  -- as soon as I get a good response to my other Squid issues..

Sincerely
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Storage devices are generally used to save the data or sometime transfer the data from one computer system to another system. However, sometimes user accidentally erased their important data from the Storage devices. Users have to know how data reco…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

803 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question