Tightening Security on PIX Firewalls

[a.ajiboye]

Hi All,

I have a number of Customers who deploy PIX 500 Series Firewalls. I have been asked to look into tightening security on these PIXs. I need your expert advise on how to do this. I have been asked to restrict unnecessary outbound traffic as well.

I have attached two samples of PIX configs that represents how most of these PIXs are configured.

I appreciate your advice and thanks for your time.

Kind regards.

[a.ajiboye]

Find attached the sample configs mentioned above in this post.

[patil_pritam]

config is ok, make sure you have allowed ouside traffic only for required servers

but you can take an advatage of port forwarding for the addtional security of the webservers and onther servers

rest is fine. Tell your clients PIX itself take care of ouside attacks from it's ASA feature.

[a.ajiboye]

Hi Patil,

Thanks for your response. Could you tell me more about allowing ouside traffic only for required servers and taking advantage of port forwarding for additional security?

Thanks.