pix can be port scan the blocked service

[samuel.lam]

The pix 525 had blocked some of the service to the outside world.

e.g the public cannot ftp the server.

However I can use nmap and superscan to scan the block service,of course the ftp cannot be login.

what can i better the firewall rule so that cannot scan the port.

any http link about this.

thx very much

[Patrick Iseli]

All public services that are open on any Firewall can be scanned from the Internet or any other network, that is why they are called public.

There are ways to protect such services using Intrusion Detection Systems or IPS that can block from such scans ans malicious activity as reconnaisance.

Basicly you have to protect your public servers, patch mangement, hardening, secure access.....

http://www.cisco.com/go/ids

sincerely

Patrick