cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
691
Views
0
Helpful
1
Replies

Pix 501 Firewalling Web Server

vivekcisco
Level 1
Level 1

I have a PIX 501 behind a comcast business gateway with a static IP address.

Hooked up a web server on the internal LAN and trying to allow outside access to the web server.

Internal network is able to access the internet.

VPN access to the internal network is fine.

But from the internet if I try to connect to the Web Server on the internal network, the connection never succeeds. The IIS web server logs dont show any connection activity at all.

Looks like the traffic does not reach the web server. Looks like the PIX is blocking it.

I am using the configuration shown in the attachment.

Could someone give me any hints on where the problem could be.

I am able to ping the static ip address from the internet. Just the http traffic does not seem to reach the web server for some reason.

Any help would be very much appreciated.

-Viv

1 Reply 1

mrmozaffari
Level 1
Level 1

Hi

change the

access-list 100 permit tcp any interface outside eq www

to

access-list 100 permit tcp any [web server {valid & invalid} ip address ] eq www

Best Regards Bahman Mozaffari.

Review Cisco Networking for a $25 gift card