Can I block traffic from nat-gateway on pix ?

[sonailsolo]

The topo just like :

internet---pix---c2621(NAT-gateway)---pc

Now PC can access internet , How can I block it without modify C2621's config ?(Because I have no permission)

Regards

[mark-obrien]

Use an inbound access list on the inside interface of the PIX.

access-list 101 deny ip host (pc address) any

(add some commands that permit some outbound traffic)

!

access-group 101 in interface inside

HTH

Mark

[sonailsolo]

HI Mark

That PC is behind NAT-Gateway , I can't deny It's IP , cause that IP is translated to NAT-Gateway's .

[rakesh.shah]

I do not think this is possible unless the pc has static NAT.

regds