Does need to block the outside interface?

[morganstanleylau]

Hi all,

Does it need to set ACL to block the outside interface , because i want to outside interface not allow people to ping and so on ...... , pls advise

Stanley

[aashish.c]

Hi Stanley,

On PIX, by default users on outside interface are not able to ping or access the inside network. They will not even get any response if they try to ping their outside interface, because ICMP are by default blocked on all the interfaces of PIX.

To allow the outside users to ping outside users, put this ACL :

access-list acl_out permit icmp any Ip_addr_out_intf.

access-group acl_out in interface outside

If you want to ping internal users, then :

access-list acl_out permit icmp any any

access-group acl_out in interface outside

kindly update for further queries :

regards

aashish C

[morganstanleylau]

Hi aashish C ,

Thanks you for your information

Becuase i dont want outside interface give any poeple ping or access any port in my PIX

All my best

Stanley