topic Re: PIX inside/outside in Network Security

PIX inside/outside

ranairfan — Fri, 21 Feb 2020 06:33:05 GMT

Can I use real ip's on my inside network of PIX without using NAT or static (inside,outside) ??

Re: PIX inside/outside

travis-dennis_2 — Mon, 10 Feb 2003 03:17:15 GMT

You can but why would you want to? That would mean that someone is actually touching the box instead of a translation through the PIX. Makes it much easier for someone to do something there are not supposed to do.

Re: PIX inside/outside

ranairfan — Mon, 10 Feb 2003 03:28:01 GMT

Thanks for the reply, actually I want to integrate PIX with the websens, I have most of my users on outside network, websense only works with outbound traffic so I have to bring all my users to the inside so that I can filter their www traffic.

Please reply with the steps that how can I use my inside traffic to communicate outside without using NAT or static commands or refer some cisco doc related to this.

Thanks and Regards,

Re: PIX inside/outside

mostiguy — Tue, 11 Feb 2003 18:54:33 GMT

You need to use the static command . Why do you not want to use static?

nat (inside) 0 network number subnet mask

Disables nat for a block.

Ex:

static (inside, outside) 192.168.0.0 192.168.0.0 netmask 255.255.255.0

nat (inside) 0 192.168.0.0 255.255.255.0 0 0

Would disable nat for the inside int with ips of 192.168.0.0/24.

Note that if you were using nat, you might have created global pools for nat. You don't use the global command unless you are using nat. So, you might need to first remove global commands, then add appropriate static and nat commands.

Matt

Re: PIX inside/outside

ranairfan — Fri, 14 Feb 2003 20:27:21 GMT

Thanks for the reply Matt,

What if I have more than one network e,g 192.168.0.0 /24, 204.16.30.0 /24 etc which i want to use without NAT.

can i use

nat (inside) 0 0.0.0.0 0.0.0.0

Static (inside,outside) 0.0.0.0 0.0.0.0

so that only with this command all the networks running can access the internet witout using NAT.

Re: PIX inside/outside

ranairfan — Sat, 15 Feb 2003 05:24:11 GMT

Its urgent please reply soon

Re: PIX inside/outside

mostiguy — Sat, 15 Feb 2003 22:16:19 GMT

You can use multiple nat and static statements.