Hi
We have a URL and access to it is controlled by source IP address, as many of our users increasingly have dynamic IP address we are looking for a quick solution without changing the current system which is hosted off site.
The solution I'm thinking of is to register a new URL point it's "A" record at firewall, set the firewall rules to check the user by prompting for username / password, then set the it to forward everything back out to the net by using Nat and on to the original URL where a connection will be allowed as we will add the new firewall's public IP address to the access list.
It is essential that the traffic flow is kept via the firewall and the we present the firewalls source IP address to the end system not the users.
So setting aside any concerns about how secure either system will be, would this approach work? and examples?