topic conduit replacement in Network Security

conduit replacement

adriatikb — Mon, 11 Mar 2019 11:04:23 GMT

how is function dhe new pix's without the conduit function?

thanks

Re: conduit replacement

Jon Marshall — Thu, 30 Aug 2007 13:08:07 GMT

Conduits have been replace by access-lists on the pix. You still need NAT etc. but you allow access by creating access-lists and applying them to interfaces eg

access-list outside_in permit tcp any host 194.32.5.1 eq www

access-list outside_in permit tcp any host 194.32.5.2 eq https

access-group outside_in interface outside

This would allow http from outside of your pix through to 194.32.5.1 and https traffic from outside to 194.32.5.2.

HTH

Jon

Re: conduit replacement

adriatikb — Thu, 30 Aug 2007 13:33:55 GMT

any book? only for ACL on pix's?

thanks

Re: conduit replacement

Jon Marshall — Thu, 30 Aug 2007 13:48:03 GMT

Not sure you need a full book. Attached is a link to config guide for pix 6.3 for the chapter on configuring access-lists. Pix v7.x will be pretty much the same.

http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/mngacl.html#wp1068801

HTH

Jon

Re: conduit replacement

jeremyault — Thu, 30 Aug 2007 13:48:41 GMT

I have the Cisco Press Study guide for the SNPA exam 642-522 which has an entire section on ACLs on PIX.

I believe there is also a tool on the Cisco website that will convert configurations with conduits to ACLs to save some work.

You can still do Conduits if you want (the PIX will support them) - however, it is recommended that you do not use Conduits if you're using ACLs because ACLs will take precidence over conduits.

Re: conduit replacement

srue — Thu, 30 Aug 2007 15:45:14 GMT

here's a tool that will convert conduits to ACL's...

http://www.cisco.com/cgi-bin/tablebuild.pl/pix

download the occ... file

Re: conduit replacement

sateeshk10 — Tue, 02 Sep 2008 15:02:57 GMT

Hi,

I have a suituation that i need to convert all my conduit to ACL..will abv mention tool is ok..

Regards

satesh