Configuring Exceed through PIX 520

[pinto_patrick]

I have a client which access a server through Exceed application which uses UDP port 177 and gets a reply from the server on UDP port 6000.How do i configure this through PIX firewall.The Client is on inside interface and the Server on DMZ.

Regards

Patrick Pinto

[mostiguy]

ugh. There is no pretty solution. The pix does not have an application level proxy for exceed. You will need to disable nat between the clients and that particular server, and allow in all udp to the server's port 177 from the inside, and all udp in from the server's port 6000 in to the dmz int.

[jercollins]

You need to include an "established" statement so it will display. This is the one I use to enable the display to return to the client:

established tcp 0 0 permitto tcp 6000 permitfrom tcp 0