topic Re: PIX 515 Issue in Network Security

PIX 515 Issue

rryan — Fri, 21 Feb 2020 08:13:57 GMT

I am replacing a software firewall with a PIX515E. I'm using the same inside and outside address's that are currently in place. I can ping to my inside router from the PIX, but no other traffic going through. I must be missing something. If someone could please take at look at this config, I would really appreciate it. Thanks,

Re: PIX 515 Issue

Karar — Sun, 26 Jun 2005 20:25:53 GMT

Hello Ryan,

you need to create acl to allow smtp & www and access-group under the outside interface.

access-list NameofACL permit tcp any destination eq 25

access-list NameofACL permit tcp any destination eq 80

access-group NameofACL in interface outside

clear xlate

after you make the changes

This is assuming smtp and www from Net address range.

Let me know if it works for you.

Re: PIX 515 Issue

rryan — Sun, 26 Jun 2005 20:39:27 GMT

I know that, I just haven't gotten to that part because I get no outbound traffic from the inside interface. I get xlate's, but nothing goes through. I can ping my inside interface from my host's and can ping my inside host's from the PIX. Any idea's?

Thanks,

Re: PIX 515 Issue

Karar — Mon, 27 Jun 2005 00:06:50 GMT

Is your inside network directly connected to your Pix ?

If not consider static routes pointing to next hop.

Is the default route set correctly on the host ?

Re: PIX 515 Issue

rryan — Mon, 27 Jun 2005 00:28:08 GMT

I have a 2610 pointing all outbound traffic to the inside address. The setup is currently working on a different firewall with the same address's. Just unplugging the old firewall and plugging in the PIX.

Re: PIX 515 Issue

Karar — Mon, 27 Jun 2005 00:32:50 GMT

run this cmd;

logging buffered

and do a traceroute/ping/www thru the fw.

This will no doubt fail and you will notice a deny message in the log.This message should indicate

whether a route does not exist, permission issue,translation problems or some other reason.

Also post the error message that results from test if these suggestions to do not work out.

Re: PIX 515 Issue

rryan — Mon, 27 Jun 2005 00:38:39 GMT

Thanks, I will do that tomorrow as soon as I can take the network offline. Do you think there could be a compatibility issue with the broadband modem, is there any reason the modem would need to be power cycled? Just thoughts!

Re: PIX 515 Issue

rryan — Mon, 27 Jun 2005 12:20:26 GMT

I did the logging buffered command, but it shows 0 messages, I also changed inside and outside ip address's to a subnet all it's own and put just 1 terminal behind it to rule out any problems from my normal internal network. I can ping the PIX from the terminal and vice versa, but no outbound. Could there be a problem with the IOS or a bad interface?