topic NT browsing through PIX in Network Security https://community.cisco.com/t5/network-security/nt-browsing-through-pix/m-p/162883#M615216 <P>I'm having some problems browsing my Windows networks through a PIX. Here's the scenario: I used to have all of my vlans connected to an RSM on a 5500 switch. On Saturday morning I shut down all of the RSM interfaces and inserted a PIX (with vlans configured) between all of my vlans. I'm having a problem now browsing my Windows networks. Will the PIX allow me to browse Windows networks across logical and/or physical interfaces?</P> Fri, 21 Feb 2020 06:56:27 GMT r.crist 2020-02-21T06:56:27Z NT browsing through PIX https://community.cisco.com/t5/network-security/nt-browsing-through-pix/m-p/162883#M615216 <P>I'm having some problems browsing my Windows networks through a PIX. Here's the scenario: I used to have all of my vlans connected to an RSM on a 5500 switch. On Saturday morning I shut down all of the RSM interfaces and inserted a PIX (with vlans configured) between all of my vlans. I'm having a problem now browsing my Windows networks. Will the PIX allow me to browse Windows networks across logical and/or physical interfaces?</P> Fri, 21 Feb 2020 06:56:27 GMT https://community.cisco.com/t5/network-security/nt-browsing-through-pix/m-p/162883#M615216 r.crist 2020-02-21T06:56:27Z Re: NT browsing through PIX https://community.cisco.com/t5/network-security/nt-browsing-through-pix/m-p/162884#M615218 <HTML><HEAD></HEAD><BODY><P>If you open enough ports, sure, which somewhat defeats the purpose of having the segments firewalled (note, that it is perfectly legitimate to use a pix like you are, with all the MS stuff open between the pix's interfaces, and just use the pix to block other stuff - management/monitoring apps, etc).</P><P></P><P>You will want tcp/udp 135 open, as well as tcp/udp 137-139, and tcp/udp 445 at a minimum. Win2k active directory will neep tcp/udp 88 for kerberos. If you are running wins, it uses 1512tcp and udp for replication between servers. </P><P></P><P>That is a start. That should work for NT 4, win2k AD might need some more ports opened, depending on topology</P><P></P></BODY></HTML> Mon, 18 Aug 2003 18:56:16 GMT https://community.cisco.com/t5/network-security/nt-browsing-through-pix/m-p/162884#M615218 mostiguy 2003-08-18T18:56:16Z