What is Required

[cscisco_admin]

How can i allow all outbound traffice for my DMZ users through the outside interface of pix?

My DMZ users have a private IP Range 192.168.2.0 and a security level of 50. The Outside interface sec is 0.

Thanks!

[dhananjoy chowdhury]

Two things are required NAT and Access-list -

- NAT commands (for all users in DMZ):

global(outside) 1 interface

nat(dmz) 1 0.0.0.0 0.0.0.0

- Access-lists (for allowing HTTP):

access-list dmz-out extended permit tcp any eq www any