topic Re: PIX Session/Connectivity problem in Network Security

PIX Session/Connectivity problem

chetona — Fri, 21 Feb 2020 05:48:02 GMT

Hello,

I have two pix conneting to ISP. I do not have NAT configured so I am using public address for my servers. Network is redundant per se.

Problem is when user trying to access a web site on a server that is behind the PIX 2, incoming traffic is coming on PIX1 and then to the server and server is sending response through PIX 2. When user PING, user gets reply but when user try to access the web site, it doesn't work. Both PIX has the same configuration in terms of port open etc. etc. What could be the problem?

Any reply is welcome

faisal

Re: PIX Session/Connectivity problem

j-block — Tue, 05 Jun 2001 19:09:52 GMT

It sounds like your topology is misconfigured. For stateful packet filtering to work properly, all traffic must pass through single PIX. If you are just running failover between the two PIX’s, this isn’t your issue. You might be running into question 15 on the PIX FAQ http://www.cisco.com/warp/public/110/pixfaq.shtml#Q15

Re: PIX Session/Connectivity problem

chetona — Wed, 06 Jun 2001 01:01:51 GMT

Hello,

Thanks for your reply. Yes you are right, I was having problem that you just mentioned. We have fixed it by having the host routing the traffic to the right gateway.

Thanks

Faisal