topic Re: PCANYwhere thru PIX in Network Security

PCANYwhere thru PIX

ddicky — Fri, 21 Feb 2020 06:48:48 GMT

I'm having a VPN connection back to the PIX but PCanywhere connection is not able to established.Any advise on which ports to open.

Re: PCANYwhere thru PIX

ywadhavk — Sat, 21 Jun 2003 15:09:49 GMT

Hi,

The defaults ports that PcAnywhere uses are tcp 5631 and udp 5632. In addition to these, PcAnywhere also uses transient tcp ports from 1024 to 5000.

Hope this helps,

Yatin

Re: PCANYwhere thru PIX

ddicky — Sun, 22 Jun 2003 05:49:04 GMT

How should I configure it on the PIX inorder to allow the PCanywhere traffice to go thru

Re: PCANYwhere thru PIX

ywadhavk — Mon, 23 Jun 2003 14:22:47 GMT

Create an acl something like the below and apply it to the proper interface. I guess it would be the outside int in the IN direction;

access-list 122 permit tcp host 1.1.1.1 any eq 5631

access-list 122 permit udp host 1.1.1.1 any eq 5632

access-list 122 permit tcp host 1.1.1.1 any gt 1024

access-group 122 in interface outside

Make sure that you also have the other policies defined for the traffic to come in from the outside. The above is in addition to what you already have allowed from the outside.

Thanks,

yatin

Re: PCANYwhere thru PIX

r.crist — Tue, 24 Jun 2003 19:22:55 GMT

Yatin's reply is correct, but to narrow down the number of ports you're permitting inbound you can assign a range in the ACL by using an object-group - provided, of course, that you're running version 6.3(1) or above:

object-group service pcanywhere tcp

port-object eq 5631

port-object eq 5632

port-object range 1024 5000

access-list 122 permit tcp host 1.1.1.1 any object-group pcanywhere

access-group 122 in interface outside

Hope this helps.

-Rich