RE: Firewall [7:55547]

2002-10-14 Thread Theodore Stout
se respond to "Lidiya White" To: [EMAIL PROTECTED] cc: Subject: RE: Firewall [7:55547] That is the normal behavior of the PIX. You'll not be able to change it... If you want to test the connectivity through the PIX, do not ping the outside inte

RE: Firewall [7:55547]

2002-10-14 Thread Lidiya White
EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Naomi James Sent: Monday, October 14, 2002 8:19 AM To: [EMAIL PROTECTED] Subject: Firewall [7:55547] I have a PIX 525. I am trying bring it up on my network. It is installed virtually betrween my router and my ISP's router. While testing,

Re: Firewall [7:55547]

2002-10-14 Thread Carroll Kong
You have not mentioned any issues though. So I will guess you are somehow unhappy with the default Pix behavior. Did you want to deny all icmp requests? By default, after a certain rev of Pix code, icmp allows are on by default. icmp deny any outside icmp deny any inside Once you place these

Re: Firewall [7:55547]

2002-10-14 Thread Robert Edmonds
Naomi, Try adding the following lines to your config access-list acl_outside permit icmp any any echo-reply (hitcnt=7515) access-list acl_outside permit icmp any any time-exceeded (hitcnt=911) access-list acl_outside permit icmp any any unreachable (hitcnt=34292) As far as pinging from outside to

Firewall [7:55547]

2002-10-14 Thread Naomi James
I have a PIX 525. I am trying bring it up on my network. It is installed virtually betrween my router and my ISP's router. While testing, I noticed that from an inside host, I could ping my inside interface on the PIX, but not the outside interface. From the ISP, they could ping my outside inte