Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I forget what the actual term it's given is, but here is the scenario.I host a few dedicated gaming servers in my datacenter. Certain games such as counter strike and call of duty lag bad because the pix firewall is scanning all the data passing thro...
I am setting up services behind a pix 501 in which I want the global address to also be the local address. I have a static pool of 5 IP's to use. I have to use one for the outside interface. Do I have to use another one for the inside interface? (whi...
I am currently using windows remote access server to manage vpn connections, and want to continue to do so for the time being. My config for vpn is as follows:access-list outside permit tcp any any eq pptpstatic (inside, outside) tcp 24.97.9.11 pptp ...
I need to forward a port range to a specific IP. I do not want to create a separate static entry for each port.I am using PAT and I need ports 2300-2400 forwarded to 192.168.5.15I tried writing the command as follows:static (inside,outside) tcp 24.97...
Can I set up a global address pool (5 static ip's) and do port redirection off of any/all of them. I know how to do it off the outside interface port using the static command, will it work the same way specifying an ip from the global pool? Or do I h...
The pix is a 501. Currently there are 3 dedicated gaming servers behind it. The internet pipe is a 10mbit fiber optic connection. I have used the pdm to monitor bandwidth usage. I have never seen usage go above 3.5mbit. The pix should be able to hand...
There are no fixup ports overlapping game ports. It looks like the two port ranges that need attention are udp 28960-28965 and 27000-27020. These have really high hit counts so I suspect these are the actual data ports that pass game information to t...
I ran the command and there are no packet captures listed.Doesn't the pix by default look at the incoming data to determine it's type and validity? I think it's called stateful packet inspection. I think what I need to do is turn that off on a couple...