About cbonthron

cbonthron · 06-05-2007

We have recently had an internal problem with staff accessing certain 'social' websites within the office. My supervisor has asked me if we can easily block access to these types of sites using our current hardware. Is this possible or will we need t...

cbonthron · 09-28-2006

I am planning to switch my ISP in October. My biggest headache will be reconfiguring my ACLs and all of my numerous static routes I've setup on my PIX 515E-R firewall. Is there an easy way to do this? Can I save the config, do a find and replace on o...

cbonthron · 02-21-2006

Hello,I'm a real noob here so please bear with me.I have been able to configure my PIX 515E to allow VPN connections onto my network, but what I need to do is set up some sort of user authentication to control access at a user level. From what I've r...

cbonthron · 02-11-2006

Hi,I'm a bit of a noob here. I've figured out a lot of what I need to do to configure my PIX 515, in fact I'm better with the commend line than with the PDM, but I'm learning.I needed to setup VPN through my PIX and was able to get it setup and worki...

cbonthron · 11-28-2005

I'm stumped on this one. Our ISP handles our DNS services and last week I added a host name with them that points to astatic public IP on our network, I'll call it: 209.209.209.209This hostname/address is for a private webserver I'm running internall...

cbonthron · 06-12-2007

You are correct, I currently have no acl on my inside interface. So what you supplied should work for me?

cbonthron · 06-12-2007

Yes, I only need to block a few. So to add these ACLs I would need to add to my config: access-list 300 permit tcp any any eq 80Then add these to deny access to facebook.com: access-list 300 deny tcp 204.15.20.26 255.255.255.255 any eq 80 ac...

cbonthron · 09-29-2006

This sounds like a good option too.I assume I need to do this through the console port in case the new configuration messes up and I can't get a connection through a telnet session. Do I need to strip anything out of my config that might mess things...

cbonthron · 09-28-2006

Thanks Patrick.Getting my config isn't the problem for me, just how I'm going to update each line in it.So my next question is:Can I strip out all lines that aren't changing in my config, take the remaining lines, append a 'no' to the start of them, ...

cbonthron · 03-14-2006

"access-group 100 in interface outside"No luck with that.Thanks though.

Member Since	‎08-14-2004 07:23 PM
Date Last Visited	‎08-18-2017 03:51 AM
Posts	19

User Statistics

User Activity

PIX 515E: Blocking access to external websites

Migrating to new ISP

Can't authenticate Mac VPN client from RADIUS server

Still 2 question remaining...

External DNS not directing back in internally

Re: PIX 515E: Blocking access to external websites

Re: PIX 515E: Blocking access to external websites

Re: Migrating to new ISP

Re: Migrating to new ISP

Re: Can't authenticate Mac VPN client from RADIUS server