At 10:33 AM 08/09/2000 -0400, you wrote:
>Is there any way that I can block access to a site or block a ip address
>from access my webserver using a Cisco PIX 515.  I believe that I may be
>able to do this using a conduit statement, but I am not sure.

You use the combo of static / access-list (used to be conduit, depends on 
your version) statements to allow inbound access through your PIX.  The 
static statement maps a routable IP address to an internal private address 
.. Then the access-list statement(s) specifies what traffic is allowed to 
flow to that static IP.  You can also create access-lists for outbound 
traffic in conjunction with the global statement.  You can do URL filtering 
using Websense, a third party product.  See below for PIX documentation:

  http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/index.htm


HTH,


Jaime



       ||          ||        Jaime M. Rita, CISSP, CCNA, Design Consultant
      .||.        .||.       GCOE Customer Design Team
     .||||.       .||||.      CA/SP Global Delivery & Solutions
  .:||||||||:....:||||||||:.    [EMAIL PROTECTED]            [EMAIL PROTECTED]     
 
C i s c o  S y s t e m s      Page: 800-365-4578 / Cell: 850-572-5346
                               eFax: 734-423-0553 / Home: 850-473-8053

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to