topic Re: PIX RAS Config in Network Security

PIX RAS Config

rtivnan — Fri, 21 Feb 2020 06:05:58 GMT

I have an interface on my PIX520 assigned to my RAS dial up network. Presently, I have all ports opened up for traffic coming from that RAS interface to my inside. I need to determine which ports I need to keep open to allow my dial up users to work. Does anyone have suggestions or a config similiar to this who can help me out ?

Thanks

Re: PIX RAS Config

bbaley — Fri, 21 Jun 2002 14:17:42 GMT

It depends on what services they’re accessing. We have our RAS on the inside behind our PIX so we don’t have to open holes through the firewall. Depending on your topology, this may or may not work for you. In any case, determine what applications they’re using (NetBios, WINS, HTTP, Telnet, FTP, etc.) and open up the ports and protocols specifically.

Re: PIX RAS Config

jwitherell — Fri, 21 Jun 2002 16:49:39 GMT

I'd put a protocol analyzer in place with the RAS device, and see what traffic patterns you end up with. You'd probably be able to make some good conclusions in a few days as to what ports should be open.