Re: Can the Pix do this? [7:32320]

2002-01-18 Thread Ximena Velasquez
in addition...do not forget your static lines (if traffic is inbound)... =) Craig Columbus wrote: The pix can easily do this. Use one line for each outside address that you want the inside client to access. You don't say what port you're contacting on the outside, but you should also limit

Can the Pix do this? [7:32320]

2002-01-17 Thread Kris Waters
I have a Pix 515 running ver. 6.1. I have a host that will be made available to the public for a web-enabled product demonstration. Parts of the product are NOT located on my internal network, so host needs to cross the firewall to function properly. Can I add a line to my access list that will

RE: Can the Pix do this? [7:32320]

2002-01-17 Thread Kris Waters
Some of my message got filtered in the last one, the syntax was supposed to look like this: access-list 105 permit ip (outside address) 255.255.0.0 (demohost) 255.255.255.0 Thanks, Kris. Message Posted at: http://www.groupstudy.com/form/read.php?f=7i=32322t=32320

Re: Can the Pix do this? [7:32320]

2002-01-17 Thread Patrick Ramsey
dependsyou have to check the apps people who wrote it... Some apps will not work no matter what you do with NAT (This is a VERY common problem with MS DCOM) so be weary. -Patrick Kris Waters 01/17/02 12:45PM I have a Pix 515 running ver. 6.1. I have a host that will be made

Re: Can the Pix do this? [7:32320]

2002-01-17 Thread Craig Columbus
The pix can easily do this. Use one line for each outside address that you want the inside client to access. You don't say what port you're contacting on the outside, but you should also limit contact by port. For example: access-list 101 permit tcp host 192.168.1.1 host 1.1.1.1 eq www