dmz connections

[carl_townshend]

By default on a pix, can anything inside access anything on a dmz connection ?

[sourabhagarwal]

by default any request initiated from inside will be allowed. PIX will inspect each packet and will allow to go out.

[amit-singh]

Hi Carl,

By default traffic from inside interface of the PIX to the DMZ is allowed but the returning traffic from the DMZ to the inside interface is not allowed. In order to have a communication you need bi-directional traffic.

Inside interface is the most secured zone on the PIX so when you are going from DMZ to inside interface you have to use NAT or Self Static from inside to DMZ interface. You alos have to use ACl's to allow traffic from DMZ to inside interface.

HTH, Please rate if it does.

-amit singh