Cisco PIX and Websense [7:6404]

2001-05-30 Thread Moiz Badr

Hi, I hope somebody with PIX  Websense guru can help,
I condigured a Websense server in the DMZ on the PIX
520 with 3 interfaces, now, Websense can not see the
users and groups i.e Windows directory services, I
opened ports tcp 139 and udp 137  138 without any
success, I contacted websense support they recommend
moving it to the inside, but I dont have extra server
so I can do that, any way, any body has done similar
setup, i appreciate if somebody jump in with any
suggestions. Thanks.
Azoo

__
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail - only $35 
a year!  http://personal.mail.yahoo.com/




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6404t=6404
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: Cisco PIX and Websense [7:6404]

2001-05-30 Thread Allen May

I would have to agree there.  It's just putting more strain on the PIX
passing all http traffic through the PIX to the DMZ for Websense monitoring.
I would put it on the inside with the users to avoid any headaches.

- Original Message -
From: Tommy Mitchell 
To: 
Sent: Wednesday, May 30, 2001 7:32 AM
Subject: Re: Cisco PIX and Websense [7:6404]


 Moiz Badr  wrote in message
 [EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
  Hi, I hope somebody with PIX  Websense guru can help,
  I condigured a Websense server in the DMZ on the PIX
  520 with 3 interfaces, now, Websense can not see the
  users and groups i.e Windows directory services,

 Why does it need to be in the DMZ?  The only thing talking to it is the
Pix
 itself, right?  I'd have to believe you're doing more harm opening those
 services from the DMZ to the inside than you could possibly gain by
putting
 the websense server on the DMZ.  Do you have some pressing reason for
doing
 this?

 Tommy
 FAQ, list archives, and subscription info:
http://www.groupstudy.com/list/cisco.html
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=6445t=6404
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]