topic Re: possible pix proxy arp in Network Security

possible pix proxy arp

h.wall — Fri, 21 Feb 2020 07:50:11 GMT

This question may just be my ignorance but I need to find an answer. I recently installed a pix 520 and now any data my 2000+ client pc's sends to the outsdie world has the ip address of my pix. I would like to have it so my clients keep their ip address. This is for my public side which all pc's have legit public ip's. Thanks

Re: possible pix proxy arp

jmia — Thu, 30 Dec 2004 18:21:12 GMT

Harris,

Sorry but don't quite follow your question, are you saying that when your internal clients send traffic outside, it is being translated to your pix outside IP address? If so, this is okay, your pix is NAT'ing all your internal IP's to a public IP address also known as many-to-one translation. Or have I misread your question?

Jay

Re: possible pix proxy arp

h.wall — Thu, 30 Dec 2004 20:06:17 GMT

The firewall is translating(natting) the internal clients to its outside address of the firewall. My internal clients all have public ip's. My vendors then send me reports on which clients hit their data bases and how many times. I also want it that way for law enforcement reasons. It is a public library I work for. Thanks in advance.

Re: possible pix proxy arp

alutsik — Thu, 30 Dec 2004 20:30:41 GMT

You probably have something like this on your PIX:

global (outside) 1 interface

nat (inside) 1 int_net mask

You can:

1. nat (inside) 0 int_pc_net mask

2. Static (outside,inside) int_pc_net mask int_pc_net mask