I want to control outbound ftp on the inside interface of my firewall.So, I submitted the following command:access-list 111 permit tcp host <host ip> any eq ftpaccess-list 111 deny tcp any any eq ftpaccess-group 111 in interface insideHowever, I can ...
I have a pix 501 p/n 47-10539-01.Can anyone help identify this as being a 10 or 50 user?The unit is at least 3 years old and cisco only lists current part numbers.Thanks
HiI have configuration problem to allow an outside host to access from inside network...I want to connect to a host of other office which is of outside network i have configured the same on Pix firewall i am able ping that host from my firewall not i...
How many ACL's can I apply to an interface? I have some long ACL's that I want to break up to make them more manageable. Can I have 5 inbound ACL's applied to my DMZ interface on a 525 running version 6.3(4)?
I have an a Pix with 6.3 software of Cisco Secure.On access-list entry I have to permit in outbound an a public address subnetwork of /27 (225.225.225.224).I have tried but it accept only "any" or unique address.Can I do it and how ?Best regardsLoren...
Hi all,I have a PIX 515E running 6.3(4), restricted license. 2 physical interfaces and 1 logical (Vlan20). Traffic from Inside to Outside and Inside to Vlan20 works great. Setup a test webserver on Vlan20 and hosts on Inside can access it without ...
Hello,I got an ADSL router over isdn with ethernet (inside) for one side and Dialer/atm (Internet) for the other.I got an "access-group 102 in" on the ethernet interface with inspect to control the outgoing traffic and I got an "access-group 103 in" ...
hi there,i have barely any cisco ios knowledge, but the network i'm managing has a cisco 827 adsl modem/router. the previous sys admin has configured it and i've taken over since 2 weeks ago. the router has 4 external ip addresses assigned to it, 3 o...
Hi Sir,I'm a newbie to FWSM. May I know what's the recommended method to configure FWSM; CLI or VMS?The FWSM I'm having here is 2.2(1), installed on a Catalyst 6509 switch with SUP720 (CatOS 8.3(4) and IOS 12.2(17d)SXB6).Also appreciate it if you can...
Hi from PIX newbie...I have an access list on my inside interface that explicitly disallows any outgoing traffic other than traffic I have allowed.I got thinking about outbound initiated ftp in this scenario. I have allowed ftp from inisde to anyon...
Hi,I am after some best practise ideas and suggestions please????I have a webserver on my DMZ with address 1.1.1.1. This server sometimes needs to access two or three hosts on the internal network, 2.2.2.2 and 2.2.2.3. In order to do this I need th...
I have the weirdest thing going on. Some of our workstations CAN reach the website http://www.capwiz.com/nach and some cannot. I go to our pix and do a clear xlate and some machines are magically fixed, yet others are not able to reach the website....
