wingate web proxy behind Cisco ASA Firewall

[pollon]

Hi,
Our current network setup has an internet connection going into an ASA outside interface. The ASA interface is then connected to the internal subnet. We have an active directory domain, which also supplies DNS and DHCP. I would like to add a Wingate proxy server to give access to internal users based on the user credentials.

How can I add the Wingate server while minimizing changes to the ASA firewall? Can I put the proxy server on the same internal subnet, that is connected via one NIC card (& IP address) only? Or would I have to use a separate IP subnet for the connection between the proxy server and the firewall?

Thanks

[MattP]

Hi,

You can add WinGate to the network, it will work fine with one NIC on the same subnet as the rest of the network. You can use a GPO to enforce proxy settings in the client browsers which will then connect via WinGate to the Internet.

WinGate will allow you to use your AD user database for authentication, and you can create web access control rules to control access based on those user credentials.

Matt

[pollon]

Thanks Matt.
So basically the client will have a web request forwarded to wingate (via browser). If credentials are verified, the web proxy will forward the request and send it to the internet through the firewall.

Thus will I only have to redirect the web replies on the ASA firewall to forward them to the web proxy? What about NATing, can this still be done via the firewall?

Thanks,
Tiziana