Showing results for 
Search instead for 
Did you mean: 

Port forwarding on Pix 515E

Mark Bracking

Port forwarding on Pix 515E


What I am trying to accomplish is to forward port 80 and port 443 to allow a Microsoft Small Business Server to access Remote Web Workplace.

Thank you for your help

Here is my config

PIX(config)# show run

: Saved


PIX Version 6.3(1)

interface ethernet0 auto

interface ethernet1 auto

interface ethernet2 auto

nameif ethernet0 outside security0

nameif ethernet1 inside security100

nameif ethernet2 dmz security50

enable password XJX9T/MNG54uoaTm encrypted

passwd XJX9T/MNG54uoaTm encrypted

hostname PIX

fixup protocol ftp 21

fixup protocol h323 h225 1720

fixup protocol h323 ras 1718-1719

fixup protocol http 80

fixup protocol ils 389

fixup protocol rsh 514

fixup protocol rtsp 554

fixup protocol sip 5060

fixup protocol sip udp 5060

fixup protocol skinny 2000

fixup protocol smtp 25

fixup protocol sqlnet 1521


access-list outside_access_in permit icmp any any echo-reply

access-list outside_access_in permit tcp any host eq https

pager lines 24

mtu outside 1500

mtu inside 1500

mtu dmz 1500

ip address outside dhcp setroute

ip address inside

ip address dmz

ip audit info action alarm

ip audit attack action alarm

pdm history enable

arp timeout 14400

global (outside) 1 interface

nat (inside) 1 0 0

nat (inside) 1 0 0

nat (dmz) 1 0 0

access-group outside_access_in in interface outside

route dmz 1

timeout xlate 3:00:00

timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 rpc 0:10:00 h225 1:00:00

timeout h323 0:05:00 mgcp 0:05:00 sip 0:30:00 sip_media 0:02:00

timeout uauth 0:05:00 absolute

aaa-server TACACS+ protocol tacacs+

aaa-server RADIUS protocol radius

aaa-server LOCAL protocol local

no snmp-server location

no snmp-server contact

snmp-server community public

no snmp-server enable traps

floodguard enable

telnet inside

telnet dmz

telnet timeout 3

ssh timeout 5

console timeout 0

dhcpd address inside

dhcpd address dmz

dhcpd dns

dhcpd wins

dhcpd lease 3600

dhcpd ping_timeout 750

dhcpd domain

dhcpd enable inside

dhcpd enable dmz

terminal width 80

banner login Enter your password to log in


: end

networ setup DSL Router>PIX>DMZ>Server

IP Address

dhcpd address dmz

DSL Router


thanks again

3 Replies 3

Nagaraja Thanthry
Cisco Employee
Cisco Employee


Please try the following:

static (inside,outside) tcp interface 80 80 netmask

static (inside,outside) tcp interface 443 443 netmask

no access-list outside_access_in permit tcp any host eq https

access-list outside_access_in permit tcp any interface outside eq https

access-list outside_access_in permit tcp any interface outside eq 80

Hope this helps.