topic Commands to monitor particular connection in pix 515 in Network Security

Commands to monitor particular connection in pix 515

raju — Fri, 21 Feb 2020 06:52:01 GMT

Hello ,

We have got pix 515 with IOS ver 6.2(1). We have created an access-list & NAT for one of customer requirement to access a server behind the firewall. Sadly , customer can't able to connect to server inside . Is there any command like debug to monitor on the firewall for troubleshooting of this particular connection only (FYI , syslog is not enabled in fireawll ) . I tried with "show logging " comamnd which gives minimum information.

Regards,

Raju

Re: Commands to monitor particular connection in pix 515

jmia — Mon, 21 Jul 2003 06:35:59 GMT

Hi Raju,

You could try cmd: debug packet

To stop debug use cmd: no debug all

The above will show you how/were the source IP (in this case your customer IP) is traversing over the PIX. Pls. be aware the debug cmd can generate HIGH cpu usage, so not recommended on production PIX.

Can you also post the result and PIX config if your still having problems - Pls. remember to exclude 'real' IP's and passwords etc.

Thanks --

Re: Commands to monitor particular connection in pix 515

pcrgm1119 — Tue, 22 Jul 2003 18:06:02 GMT

Is the server the customer is trying to access in a DMZ, or on you actual internat network? Do you have a stattric command setup for the internal server to external address?

Re: Commands to monitor particular connection in pix 515

raju — Tue, 22 Jul 2003 18:32:13 GMT

Hi!

Thanks for your reply . The server is located inside our Network (secured Network ). I do have a static command with external address for the server . We have similar entries for some other customers with different IP addresses and it's all working fine in secured way other than this new customer . I want to to know some commands like trace or something like that to findout what does firewall do when it receives packet or request from this new customer .

Thanks