pix 515 add/remove IP restrictions on the fly

[p.durrant]

is there a method of add/remove IP blocks of a PIX other then the web interface or telnet, eg snmp or simular, our applications requires to add/remove ip blocks every hour

[sachinraja]

hi durrant,

Are you talking about access-lists to be added/removed every hour to your PIX ? or is it the some other access through the PIX ? please be a specific on your requirement..

Thanks..

[p.durrant]

yes ACL, we are using software TCP blocking at the moment, but would like to push this forward to the PIX, we IP block users that attack our mailservers for an hour or perminantly if they are on an RBL list, a list is maintained and checked every hour and the IP blocks are removed if not on an RBL list