No outside access (inside to out) from non domain devices

[cadstillo]

How can I keep non-domain devices from going outside of our network on a PIX 515?

[Jon Marshall]

Hi

Do you have the IP addresses of these devices. Are they restricted to onre subnet. If so it is relatively easy with an inside access-list on the pix. If the addresses can change then it becomes a lot more difficult. Could you expand on your requirements.

Jon

[cadstillo]

No they are not restricted to one subnet. The address of non domain devices could change, more than likely not but the possiblity is there.