Remote Manage PIX on inside IF

[baranowski]

I have a 515E and I've created a rule to allow a outside /32 host https access to the pix interface (inside). It's not working... I do get a:

Deny inbound tcp src outside:x.x.x.x/42368 dst inside:x.x.x.x/443.

Do I need to move the PIX interface to the dmz or should the PIX allow treating the inside if like the dmz?

[jparrishrsi]

The only way to connect to the PDM interface from the outside is to use a VPN/IPSEC connection and connect to the outside interface. By design the pix will only allow connections to the inside from the inside (i.e. you cannot connect to the inside interface from the outside). The outside interface requires a IPSEC connection for https access to PDM. It is the same with ssh and telnet access to any PIX on it's outside interface.

Hope this helps.

Thanks,

Jason Parrish

jparrish@rightsys.com