pix forwarding broadcast traffic...how to?

[jasonhumes]

Is is possible to configure a pix firewall to forward broadcast traffic...something like "ip helper" in the IOS world. We have citrix clients on the inside of the firewall connecting to a farm on the outside and the published apps are found via broadcast traffic which the pix is not forwarding...any ideas? Thanks

[Patrick Iseli]

What exactly is the goal ? Ip helper does not exist on the PIX.

There are multiple ways to resolve name resolution issues, without a helper address, that are causing that kind of broadcasts.

DNS for Active Directory or WINS for Windows 2000 Domains.

There exists also a DHCP Relay on the PIX if that is the issue.

sincerely

Patrick

[jasonhumes]

The problem is that citrix clients send a udp broadcast to find published applications on the Citrix server/farm...the broadcasts dont make it through the pix and as such, the published apps dont appear to the client. Sure, I can manually specify the ip address of the servers on the client...but we dont want to have to do that..but if there is no way for the pix to just forward broadcasts, a la "ip udp forwarding" in IOS, then I guess we'll just have to configure the ips. Thanks.