topic Re: PIX Configuration in Network Security

PIX Configuration

admin_2 — Fri, 21 Feb 2020 07:19:45 GMT

I am configuring a PIX 515e. Want to deny all outgoing traffic but the ports I allow. I was trying to configure a service group to use inside of PDM for web traffic. I add http and https but the rule does not work.

I can deny all traffic but to try and allow it without using the all TCP traffic does not work.

Is there a list of what the services convert to and which are need to do simple transactions. (ie Browse the web and send and recieve email)

Re: PIX Configuration

j.hato — Tue, 06 Apr 2004 07:41:14 GMT

HI,

Here are the sample config:

object-group service InternetTCP tcp

port-object eq http

port-object eq https

port-object eq domain

access-list acl_out permit tcp host 10.5.70.25 any object-group InternetTCP

access-group acl_out in interface inside.

Make sure the inside can connect to outside before you apply for the access-group.

HATO

Re: PIX Configuration

Wed, 07 Apr 2004 22:10:47 GMT

Thank you for the info but once I apply the access group to the interface I lose the ability to browse.

Any ideas?

Re: PIX Configuration

j.hato — Thu, 08 Apr 2004 01:31:45 GMT

Hi,

Try to log everything,

PIX(config)# logging timestamp

PIX(config)# logging buffer debugging

PIX(config)# logging on

PIX(config)# show log

Please verify the log, make sure your tcp traffic won;t got blocked. When blocked try to add the tcp/udp ports to the service-group

HATO