topic Re: the problems pix 520 with multiple network interfaces. in Network Security https://community.cisco.com/t5/network-security/the-problems-pix-520-with-multiple-network-interfaces/m-p/10082#M681263 <HTML><HEAD></HEAD><BODY><P>Never put a deny and a permit in the same acl, Break them apart into two separate lists. Also, 4.2(3) is pretty old code. </P></BODY></HTML> Wed, 18 Jul 2001 15:50:53 GMT wdrootz 2001-07-18T15:50:53Z the problems pix 520 with multiple network interfaces. https://community.cisco.com/t5/network-security/the-problems-pix-520-with-multiple-network-interfaces/m-p/10081#M681262 <P>I have encounter a security access problem.One PIX 520 with four NICs.It has a enet interface with security value 10 and a hbnet interface with security value 20 besides the inside interface with security value 100 and the outside interface with secuirty value 0.i find the problem after i make a ACL policy configuration .below is what the command:</P><P>"outbound 1 deny 0.0.0.0</P><P>outbound 1 except 192.168.0.100 tcp</P><P>outbound 1 permit 210.25.0.0 255.255.0.0 tcp ;the address space 210.25.0.0 is in the ENET .</P><P>apply (inside) 1 outgoing_dest "</P><P> </P><P>Last,the soruce address host 192.168.0.100 can access the outside network,but unfortunated,it cann't access all the destination in the ENET.</P><P>The Pix software version is 4.2(3).</P><P>So what is the reason?</P><P>Thank you very much.</P><P></P><P></P><P></P><P> </P> Fri, 21 Feb 2020 05:48:51 GMT https://community.cisco.com/t5/network-security/the-problems-pix-520-with-multiple-network-interfaces/m-p/10081#M681262 litao-ma 2020-02-21T05:48:51Z Re: the problems pix 520 with multiple network interfaces. https://community.cisco.com/t5/network-security/the-problems-pix-520-with-multiple-network-interfaces/m-p/10082#M681263 <HTML><HEAD></HEAD><BODY><P>Never put a deny and a permit in the same acl, Break them apart into two separate lists. Also, 4.2(3) is pretty old code. </P></BODY></HTML> Wed, 18 Jul 2001 15:50:53 GMT https://community.cisco.com/t5/network-security/the-problems-pix-520-with-multiple-network-interfaces/m-p/10082#M681263 wdrootz 2001-07-18T15:50:53Z