topic Pix configuration help please in Network Security

Pix configuration help please

touvue — Fri, 21 Feb 2020 06:53:38 GMT

We have a Pix 20 (v.6.2(2)). We are trying to configure the pix so that it can pass Windows 2000 authentication (Kerberos) to the inside network from the DMZ. What is the correct and saftest way to do so.

Thanks in advance,

Tou

Re: Pix configuration help please

bmuha — Tue, 29 Jul 2003 14:19:26 GMT

Tou

You will need to set up a static to be able to pass traffic from a lower security level to a higher security level dmz-->inside

static (inside,dmz) 65.xxx.xxx.xxx 10.x.x.x netmask 255.255.255.255

Then I would set up a access list or set of conduits to allow port 750 and any others that MS would like to use for the authentication proccess.. I would also resict it down even further by adding hosts or machines that can talk to the inside network from the DMZ. Never reall felt comfortable allowing the DMZ to talk to a inside interface...

Hope this helps

If there is a better way I am willing to learn 🙂

Re: Pix configuration help please

touvue — Tue, 29 Jul 2003 19:49:31 GMT

The static part is working. We just can't pass to the inside (88 and 750 is both open). Any suggestion will be apprecciated.

Thanks,

Tou