topic Re: CONNECTION TRACKING ON PIX in Network Security

CONNECTION TRACKING ON PIX

giuliano — Fri, 21 Feb 2020 06:32:16 GMT

Hi.

How can i implement connection tracking acl on pix firewall?

Like cisco ios "access-list permit ip any any gt 1024 established".

Thanks.

Re: CONNECTION TRACKING ON PIX

kevin-reynolds — Mon, 03 Feb 2003 18:40:43 GMT

The PIX does this much better than a router and you do not even need an ACL entry. Make sure you are logging the following syslog messages:

302013 - Built TCP connection

302014 - Teardown TCP connection

302015 - Built UDP connection

302016 - Teardown UDP connection

For details,

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_62/syslog/pixemsgs.htm

I wrote a perl script that is capable of quickly summarizing information gathered by these messages. I could send it to you if you like.

Kevin

Re: CONNECTION TRACKING ON PIX

mklaphek — Tue, 04 Feb 2003 19:08:21 GMT

I would like a copy of the script, please! Can you post it here? Thanks!

Re: CONNECTION TRACKING ON PIX

kevin-reynolds — Tue, 04 Feb 2003 20:32:57 GMT

The script did not transfer well into the message box. I can email to you if you like?

Kevin

Re: CONNECTION TRACKING ON PIX

pixit — Tue, 04 Feb 2003 21:58:38 GMT

Hi Kevin,

would you please send me the script as well. thanks

nowcheckit@yahoo.com

Re: CONNECTION TRACKING ON PIX

giuliano — Thu, 06 Feb 2003 07:33:35 GMT

Ok thanks, send me at

odoresemprevivo@hotmail.com

Re: CONNECTION TRACKING ON PIX

giuliano — Thu, 06 Feb 2003 07:38:05 GMT

And i cannot implenet nothing to do connection tracking???

Re: CONNECTION TRACKING ON PIX

rbinc — Thu, 06 Feb 2003 14:46:32 GMT

Kevin, could you also send me the script! i have beenlooking for something like that (didn't want to reinvent the wheel)

jfountain@rbinc.com

thanks!

Re: CONNECTION TRACKING ON PIX

matt.richard — Thu, 06 Feb 2003 17:30:16 GMT

Kevin, I'd love a copy of the script as well. matthew.richard@cocc.com.

If anyone is interested I have also written a perl script that shows all unusual messages as well as summaries of all denied packets. I have a version for the Pix 6.2 log files and one for IOS 12.x log files. Not sure if it is the same as Kevin's but I would be happy to share on request.

Re: CONNECTION TRACKING ON PIX

jfanter — Tue, 11 Feb 2003 16:17:23 GMT

Kevin, could you send the script to me @ jfanter@stlcc.edu. Thanks

Jon F.

Re: CONNECTION TRACKING ON PIX

gomesrichard — Tue, 11 Feb 2003 18:14:40 GMT

Kevin,

pls also send me the script and instructions:

gomesrichard@yahoo.com

thanks

richard

Re: CONNECTION TRACKING ON PIX

robert.mcclain — Tue, 11 Feb 2003 21:14:28 GMT

Kevin could I get a copy of that script e-mailed to me also..

robert.mcclain@lendersservice.com

Thanks

Re: CONNECTION TRACKING ON PIX

blackwoj — Tue, 11 Feb 2003 23:00:53 GMT

Hi Kevin,

I'd love a copy of the script.

Appreciate it.

blackwoj@stjosephs_marshfield.org